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Most of this handbook is devoted to techniques and 
information to help you design and implement semi- 
conductor memory in your application or system. In 
this section, however, the memory chip itself will be 
examined and the processing technology required to 
turn a bare slice of silicon into high performance 
memory devices is described. The discussion has 
been limited to the basics of MOS (Metal Oxide 
Semiconductor) technologies as they are responsi- 
ble for the majority of memory devices manufactured 
at Intel. 


There are three major MOS technology families- 
PMOS, NMOS, and CMOS (Figure 1). They refer to 
the channel type of the MOS transistors made with 
the 
technology. 
PMOS technologies 
implement 
p-channel transistors by diffusing p-type dopants 
(usually boron) into an n-type silicon substrate to 
form the source and drain. P-channel is so named 
because the channel is comprised of positively 
charged carriers. NMOS technologies are similar, 
but use n-type dopants (normally phosphorus or ar- 
senic) to make n-channel transistors in p-type silicon 
substrates. N-channel is so named because the 


channel is comprised of negatively charged carriers. 
CMOS or Complementary MOS technologies com- 
bine both p-channel and n-channel devices on the 
same silicon. Either p- or n-type silicon substrates 
can be used, however, deep areas of the opposite 
doping type (called wells) must be defined to allow 
fabrication of the complementary transistor type. 


Most of the early semiconductor memory devices, 
like Intel's pioneering 1103 dynamic RAM and 1702 
EPROM were made with PMOS technologies. As 
higher speeds and greater densities were needed, 
most new devices were implemented with NMOS. 
This was due to the inherently higher speed of 
n-channel charge carriers (electrons) in silicon along 
with improved process margins. CMOS technology 
has begun to see widespread commercial use in 
memory devices. It allows for very low power devic- 
es used for battery operated or battery back-up ap- 
plications. Historically, CMOS has been slower than 
any NMOS device. Today, CMOS technology has 
been improved to produce higher speed devices. 


In the following section, the basic fabrication se- 
quence for an HMOS circuit will be described. 
HMOS is a high performance n-channel MOS pro- 
cess developed by Intel for 5V single supply circuits. 
HMOS, and CHMOS, CHMOS-E (EPROM) and 
ETOX (Flash Memory), along with their evolutionary 
counterparts comprise the process family responsi- 
ble for most of the memory components produced 
by Intel today. 


The MOS IC fabrication process begins with a slice 
(or wafer) of single crystal silicon. Typically, it's 150 
or 200 millimeter in diameter, about a half millimeter 
thick, and uniformly doped p-type. The wafer is then 
oxidized in a furnace at around 1000°C to grow a 
thin layer of silicon dioxide (Si02) on the surface. 
Silicon nitride is then deposited on the oxidized wa- 
fer in a gas phase chemical reactor. The wafer is 
now ready to receive the first pattern of what is to 
become a many layered complex circuit. The pattern 
is etched into the silicon nitride using a process 
known as photolithography, which will be described 
in a later section. This first pattern (Figure 2) defines 
the boundaries of the active regions of the IC, where 
transistors, capacitors, diffused resistors, and first 
level interconnects will be made. 


Figure 2. First Mask 


The patterned and etched wafer is then implanted 
with additional boron atoms accelerated at high en- 
ergy. The boron will only reach the silicon substrate 
where the nitride and oxide was etched away, pro- 
viding areas doped strongly p-type that will electri- 
cally separate active areas. After implanting, the wa- 
fers are oxidized again and this time a thick oxide is 
grown. The oxide only grows in the etched areas 
due to silicon nitride's properties as an oxidation bar- 
rier. When the oxide is grown, some of the silicon 
substrate is consumed and this gives a physical as 
well as electrical isolation for adjacent devices as 
can be seen in Figure 3. 


Having fulfilled its purpose, the remaining silicon ni- 
tride layer is removed. A light oxide etch follows tak- 
ing with it the underlying first oxide but leaving the 
thick (field) oxide. 


Now that the areas for active trarsistors have been 
defined and isolated, the transistor types needed 
can be determined. The wafer h, again patterned 
and then if special characteristics [such as depletion 
mode operation) are required, it is implanted with 
dopant atoms. The energy and C ose at which the 
dopant atoms are implanted determines much of the 
transistor's characteristics. The type of the dopant 
provides for depletion mode (n-Wpe) or enhance- 
ment mode (p-type) operation. 


The transistor types defined, the gate oxide of the 
active transistors are grown in a high temperature 
furnace. Special care must be taken to prevent con- 
tamination or inclusion of defects in the oxide and to 
ensure uniform consistent thickne;ss. This is impor- 
tant to provide precise, reliable dtlvice characteris- 
tics. The gate oxide layer is then masked and holes 
are etched to provide for direct gate to diffusion 
("buried") contacts where needed. 


The wafers are now deposited with a layer of gate 
material. This is typically poly crystaline silicon 
("poly") which is deposited in a gas phase chemical 
reactor similar to that used for silicon nitride. The 
poly is then doped (usually with phosphorus) to bring 
the sheet resistance down to 10-20 fi/square. This 
layer is also used for circuit interc,~nnects and if a. 
lower resistance is required, a refractory metal/poly- 
silicon composite or refractory metal silicide can be 
used instead. The gate layer is t~en patterned to 
define the actual transistor gates and interconnect 
paths (Figure 4). 
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Figure 4. Post Gate MllSk 


The wafer is next diffused with n-type dopant (typi- 
cally arsenic or phosphorus) to form the source and 
drain junctions. The transistor gate material acts as 
a barrier to the dopant providing an undiffused chan- 
nel self-aligned to the two junctions. The wafer is 
then oxidized to seal the junctions from contamina- 
tion with a layer of Si02 (Figure 5). 
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Figure 5. Post Oxidation 


A thick layer glass is then deposited over the wafer 
to provide for insulation and sufficiently low capaci- 
tance between the underlying layers and the metal 
interconnect signals. (The lower the capacitance, 
the higher the inherent speed of the device.) The 
glass layer is then patterned with contact holes and 
placed in a high temperature furnace. This furnace 
step smooths the glass surface and rounds the con- 
tact edges to provide uniform metal coverage. Metal 
(usually aluminum or aluminum/silicon) is then de- 
posited on the wafer and the interconnect patterns 
and external bonding pads are defined and etched 
(Figure 6). The wafers then receive a low tempera- 
ture (approximately 500°C) alloy that insures good 
ohmic contact between the aluminum and diffusion 
or poly. 


Figure 6. Complete 
Circuit (without 
passivation) 


At this point the circuit is fully operational, however, 
the top metal layer is very soft and easily damaged 
by handling. The device is also susceptible to con- 
tamination or attack from moisture. To prevent this 
the wafers are sealed with'a passivation layer of sili- 
con nitride or a silicon and phosphorus oxide com- 
posite. Patterning is done for the last time opening 
up windows only over the bond pads where external 
connections will be made, 


This completes basic fabrication sequence for a sin- 
gle poly layer process. Double poly processes such 
as those used for high density Dynamic RAMs, 
EPROMs, flash memories, and EEPROMs follow the 
same general process flow with the addition of gate, 
poly deposition, doping, and interlayer dielectric pro- 
c~ss modules required for the additional poly layer 
(FIgure 7). These steps are performed right after the 
active areas have been defined (Figure 3) providing 
the capacitor or floating gate storage nodes on 
those devices. 
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Figure 7. Double Poly Structure 


After fabrication is complete, the wafers are sent for 
testing. Each circuit is tested individually under con- 
ditions designed to determine which circuits will op- 
erate properly both at low temperature and at condi- 
tions found in actual operation. Circuits that fail 
these tests are noted to distinguish them from good 
circuits. From here the wafers are sent for assembly 
where they are sawed into individual circuits with a 
paper-thin diamond blade. The noted circuits are 
then separated out and the good circuits are sent on 
for packaging. 


Packages fall into two categories-hermetic 
and 


non-hermetic. Hermetic packages are Cerdip, where 
two ceramic halves are sealed with a glass fritt, or 
ceramic with soldered metal lids. An example of her- 
metic package assembly is shown in Table 1. Non- 
hermetic packages are molded plastics. 


The ceramic package has two parts, the base, which 
has the leads and die (or circuit) cavity, and the met- 
al lid. The base is placed on a heater block and a 
metal alloy preform is inserted. The die is placed on 
top of the preform which bonds it to the package. 
Once attached, wires are bonded to the circuit and 
then connected to the leads. Finally the package is 
placed in a dry inert atmosphere and the lid is sol- 
dered on. 


The cerdip package consists of a base, lead frame, 
and lid. The base is placed on a heater block and 
the le.ad frame placed on top, This sets the lead 
frame in glass attached to the base. The die is then 
attached and bonded to the leads. Finally the lid is 
placed on the package and it is inserted in a seal 
furnace where the glass on the two halves melt to- 
gether making a hermetic package. 


In a plastic package, the key component is the lead 
frame. The die is attached to a pad on the lead 
frame and bonded out to the leads with gold wires. 
The frame then goes to an injection molding ma- 
chine and the package is formed around the lead 
frame. After mold the excess plastic is removed and 
the leads trimmed. 


After ass~mbly, the individual circuits are retested at 
an elevated operating temperature to assure critical 
operating parameters and separated according to 
speed and power consumption into individual speci- 
fication groups. The finished circuits are marked and 
then readied for shipment. 


The basic process flow described above may make 
VLSI device fabrication sound straightforward, how- 
ever, there are actually hundreds of individual opera- 
tions that must be performed correctly to complete a 
working circuit. It usually takes well over two months 
to complete all these operations and the many tests 
and measurements involved throughout the manu- 
facturing process. Many of these details are respon- 
sible for ensuring the performance, quality, and reli- 
ability you expect from Intel products. The following 
sections will discuss the technology underlying each 
of the major process elements mentioned in the ba- 
sic process flow. 


The photo or masking technology is the most impor- 
tant part of the manufacturing flow if for no other 
reason than the number of times it is applied to each 
wafer. The manufacturing process gets more com- 
plex in order to make smaller and higher perform- 
ance circuits. As this happens the number of mask- 
ing steps increases, the features get smaller, and 
the tolerance required becomes tighter. This is 
largely because the minimum size of individual pat- 
tern elements determine the size of the whole cir- 
cuit, effecting its cost and limiting its potential com- 
plexity. Early MOS IC's used mini"Tlumgeometries 
(lines or spaces) of 8-10 microns (1 micron = 10-6 
meter "" 1/25,000 inch). The n-channel processes 
of the mid 1970's brought this down to approximate- 
ly 5 microns, and today minimum geometries of 0.8 
and even 0.6 microns are in prodJction. This dra- 
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matic reduction in feature size was achieved using 
the newer high resolution photo resists and optimiz- 
ing their processing to match improved optical print- 
ing systems. 


A second major factor in determining the size of the 
circuit is the registration or overlay error. This is how 
accurately one pattern can be aligned to a previous 
one. Design rules require that space be left in all 
directions according to the overlay error so that un- 
related patterns do not overlap or interfere with one 
another. As the error space increases the circuit size 
increases dramatically. Only a few years ago stan- 
dard alignment tolerances were ;:: ± 2 microns; now 
advanced Intel processes have reduced this dramat- 
ically due mostly to the use of advanced projection 
and step and repeat exposure equipment. 


The wafer that is ready for patterning must go 
through many individual steps before that pattern is 
complete. First the wafer is baked to remove mois- 
ture from its surface and is then treated with chemi- 
cals that ensure good resist adhesion. The thick 
photoresist liquid is then applied and the wafer is 
spun flat to give a uniform coating, critical for high 
resolution. The wafer is baked at a low temperature 
to solidify the resist into gel. It is then exposed with a 
machine that aligns a mask with the new pattern on 
it to a previously defined layer. The photo-resist will 
replicate this pattern on the wafer. 


Negative working resists are polymerized by the light 
and the unexposed resist can be rinsed off with sol- 
vents. Positive working resists use photosensitive 
polymerization inhibitors that allow a chemically re- 
active developer to remove the exposed areas. The 
positive resists require much tighter control of expo- 
sure and development but yield higher resolution 
patterns than negative resistance systems. 


The wafer is now ready to have its pattern etched. 
The etch procedure is specialized for each layer to 
be etched. Wet chemical etchants such as hydro- 
fluoric acid for silicon oxide or phosphoric acid for 
aluminum are often used for this. The need for 
smaller features and tighter control of etched dimen- 
sions is increasing the use of plasma etching in fab- 
rication. Here a reactor is run with a partial vacuum 
into which etchant gases are introduced and an 
electrical field is applied. This yields a reactive plas- 
ma which etches the required layer. 


The wafer is now ready for the next process step. Its 
single journey through the masking process required 
the careful engineering of mechanics, optics, organ- 
ic chemistry, inorganic Chemistry,plasma chemistry, 
physics, and electronics. 


The picture of clean room garbed operators tending 
furnace tubes glowing cherry red is the one most 
often associated with IC fabrication. These furnace 
operations are referred to collectively as diffusion 
because they employ the principle of sold state diffu- 
sion of matter to accomplish their results. In MOS 
processing, there are three main types of diffusion 
operations: predeps, drives, and oxidations. 


Predeposition, or "predep," is an operation where a 
dopant is introduced into the furnace from a solid, 
liquid, or gaseous source and at the furnace temper- 
ature (usually 900·C-1200·C) a saturated solution is 
formed at the silicon surface. The temperature of the 
furnace, the dopant atom, and rate of introduction 
are all engineered to give a specific dose of the dop- 
ant on the wafer. Once this is completed the wafer is 
given a drive cycle where the dopant left at the sur- 
face by the predep is driven into the wafer by high 
temperatures. These are generally at different tem- 
peratures than the predeps and are designed to give 
the required junction depth and concentration pro- 
file. 


Oxidation, the third category, is used at many steps 
of the process as was shown in the process flow. 
The temperature and oxidizing ambient can range 
from 800·C to 1200·C and from pure oxygen to mix- 
tures of oxygen and other gases to steam depending 
on the type of oxide required. Gate oxides require 
high dielectric breakdown strength for thin layers 
(between 0.01 and 0.1 micron) and very tight control 
over thickness (typically ± 0.005 micron or less than 
± 1/5,000,000 inch), while isolation oxides need to 
be quite thick and because of this their dielectric 
breakdown strength per unit thickness is much less 
important. 


The properties of the diffused junctions and oxides 
are key to the performance and reliability of the fin- 
ished device so the diffusion operations must be ex- 
tremely well controlled for accuracy, consistency 
and purity. 


Intel's high performance products require such high 
accuracy and repeatability of dopant control that 
even the high degree of control provided by diffusion 
operations is inadequate. However, this limitation 
has been overcome by replacing critical predeps 
with ion implantation. In ion implantation, ionized 
dopant atoms are accelerated by an electric field 


and implanted 
directly 
into the wafer. 
The accelera- 
tion 
potential 
determines 
the 
depth 
to 
which 
the 
dopant 
is implanted. 


The charged 
ions can be counted 
electrically 
during 


implantation 
giving very tight control 
over dose. The 


ion implanters 
used to perform 
this are a combina- 
tion of high vacuum 
system, 
ion source, 
mass spec- 
trometer, 
linear accelerator, 
ultra high resolution 
cur- 


rent integrator, 
and ion beam scanner. 
You can see 


that this important 
technique 
requires 
a host of so- 
phisticated 
technologies 
to support 
it. 


Thin film depositions 
make up most of the features 
on the completed 
circuit. They include 
the silicon ni- 
tride 
for defining 
isolation, 
polysilicon 
for the 
gate 
and interconnections, 
the glass for interlayer 
dielec- 
tric, metal for interconnection 
and external 
connec- 


tions, 
and passivation 
layers. 
Thin film depositions 
are done by two main methods: 
physical 
deposition 
and chemical 
vapor 
deposition. 
Physical 
deposition 


is most common 
for deposition 
metal. Physical 
dep- 
ositions 
are performed 
in a vacuum 
and are accom- 
plished 
by vaporizing 
the metal 
with a high energy 


electron 
beam and redepositing 
it on the wafer or by 
sputtering 
it from a target to the wafer under an elec- 


tric field. 


Chemical 
vapor 
deposition 
can 
be done 
at atmo- 
spheric 
pressure 
or under a moderate 
vacuum. 
This 


type of deposition 
is performed 
when chemical 
gas- 
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es react at the wafer surface 
and deposit 
a solid film 


of the reaction 
product. 
These 
reactors, 
unlike their 


general 
industrial 
counterparts, 
must 
be controlled 


on a microscale 
to provide exact chemical 
and phys- 


ical properties 
for thin films such liS silicon 
dioxide, 


silicon 
nitride, 
and polysilicon. 


The fabrication 
of modern 
memory devices 
is a long, 


complex 
process 
where 
each 
step 
must 
be moni- 


tored, 
measured 
and verified. 
Developing 
a totally 


new manufacturing 
process 
for each new product 
or 


even product 
line takes a long time and involves 
sig- 


nificant 
risk. 
Because 
of this, 
Intel 
has developed 


process 
families, 
such 
as HMOS, 
on which 
a wide 


variety 
of devices 
can be made. These 
families 
are 


scalable 
so that 
circuits 
need 
not 
be totally 
rede- 


signed 
to 
meet 
your 
needs 
for 
higher 
perform- 


ance.l1l 
They are evolutionary 
so tl~at development 


time of new processes 
and productH can be reduced 


without compromising 
Intel's commitment 
to consist- 


ency, quality, and reliability. 


The manufacture 
of today's 
MOS 
'Tlemory devices 


requires 
a tremendous 
variety 
of tl3chnologies 
and 


manufacturing 
techniques, 
many mere than could be 


mentioned 
here. Each requires 
a te,am of experts 
to 


design, 
optimize, 
control 
and main~in 
it. All these 


people 
and 
thousands 
of others 
involved 
in engi- 


neering, design, testing and production 
stand behind 


Intel's 
products. 
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S. Liu, 
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"H-MOS 
Scales 
Tradition~1 
Devices 
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er Performance 
Level," 
Electronics, 
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18. 1977. 


Flash Overview 
2 


The ideal memory system optimizes density, nonvolatil- 
ity, fast readability and cost effectiveness. While tradi- 
tional memory technologies may individually exhibit 
one or more of these desired characteristics, no single 
memory technology has achieved all of them without 
major tradeoffs-until 
the introduction of Intel Flash 
Memory. 


Introduced by Intel in 1988, ETOX flash memory is a 
high-density, truly nonvolatile and high performance 
read-write memory solution also characterized by low 
power consumption and extreme ruggedness and high 
reliability. The cost trend of Intel Flash Memory com- 
ponents continues to decline sharply due to: (1) manu- 
facturing economies inherent in ETOX, Intel's indus- 
try-standard 
EPROM-based 
flash 
technology, 
(2) 
increases in memory density, and (3) rapid growth in 
production volume. 


A comparison between Intel Flash Memory and other 
solid-state memory technologies underscores the fact 
that flash offers a design solution with distinct advan- 
tages. These advantages are key to future product dif- 
ferentiation for many applications requiring firmware 
updates or compact mass storage (Figure 1). 


ROM (read-only memory) is a mature, high densi- 
ty, nonvolatile, reliable and low cost memory tech- 
nology widely used in PC and embedded applica- 
tions. 
Once 
it 
is 
manufactured 
however, 
the 


contents of a ROM can never be altered. Addition- 
ally, initial ROM programming 
involves a time- 


consuming mask development process that requires 
stable code and is most cost-effective in high vol- 
umes. 


Easy updatability makes flash memory clearly more 
flexible than ROM in most applications. 


SRAM (static random-access memory) is a high- 2 
speed, reprogrammable memory technology which 
is limited by its volatility and relatively low density. 
As a volatile memory technology, SRAM requires 
constant power to retain its contents. Built-in bat- 
tery backup is therefore required when the main 
power source is turned off. Since battery failure is 
an inevitable fact of life, SRAM data loss is an ever- 
present danger. Additionally, SRAM requires four 
to six transistors to store one bit of information. 
This becomes a significant limitation in developing 
higher densities---effectively keeping SRAM cost 
relatively high. 
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In contrast, Intel flash memory is inherently nonvola- 
tile, and the single transistor 
cell design of Intel's 
ETOX manufacturing process is extremely scalable, al- 
lowing the development of continuously higher densi- 
ties 
and 
steady 
cost 
improvement 
over 
SRAM 
(Figure 2). 
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- 
EPROM 
(electrically 
programmable 
read-only 
memory) 
is a mature, 
high-density, 
nonvolatile 
technology which provides a degree of updatability 
not 
found 
in ROM. 
An 
OEM 
may 
program 
EPROM as needed to accommodate code changes 
or varying manufacturing unit quantities. Once pro- 
grammed, 
however, the EPROM 
may only be 
erased by removing it from the system and then 
exposing the memory 
component 
to ultraviolet 
light-an 
impractical and time-consuming proce- 
dure for many OEMs and a virtually impossible 
task for end-users. 


Unlike EPROM, flash memory is electrically re-writa- 
ble within the host system, making it a much more 
flexible and easier to use alternative. Flash memory of- 
fers OEMs not only high density and nonvolatility, but 
higher functionality and the ability to differentiate their 
systems. 


- 
EEPROM 
(electrically 
erasable 
programmable 
read-only memory) is nonvolatile and electrically 
byte-erasable. Such byte-alterability 
is needed in 
certain applications but involves a more complex 
cell structure, and significant trade-offs in terms of 
limited density, lower reliability and higher cost, 
m~king it unsuitable as a mainstream memory. 


Unlike EEPROM, Intel flash memory technology uti- 
lizes ~. one-transistor 
cell, allowing higher densities, 
~calability, lower c:ost,and higher reliability, while tak- 
mg advantage of m-system, electrical erasability (Fig- 
ure 3). 
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DRAM (dynamic random access memory) is a vol- 
atile memory known for its dem;ity and low cost. 
Because of its volatility, howev~,r, it requires not 
only a constant power supply to retain data, but 
also an archival storage technology, such as disk, to 
back it up. 


Partnered with hard disks for permanent mass storage, 
DRAM technology has provided a low-cost, yet space 
and power-hungry solution for today's PCS. 


With ETOX process technology, Intel manufactures a 
flash memory cell that is 30% smalh:r than equivalent 
DRAM cells. Flash memory's scalab:lity offers a price 
advantage as well, keeping price parity with DRAM, 
and also becoming more attractive as a hard disk re- 
placement in portable systems as dmsities grow and 
costs decline. 


Intel flash memory combines advantages from each of 
th~se .memory technologies. In embedded memory ap- 
plications, flash memory provides higher-performance 
and more flexibility than ROM and EPROM, 
while 
providing higher density and better cost effectiveness 
than battery-backed SRAM and EEPROM. Moreover, 
the true nonvolatility and low power consumption 
charact~ristics of flash memory make it a compelling 
alternative to DRAM in many applications. 


Unlike other approaches to flash memory, Intel ETOX 
is a proven technology. As its name suggests, ETOX 
(or "EPROM tunnel oxide") technology evolved from 
EPROM. 
With 
95% 
process 
compatibility 
with 
EPROM, ETOX taps experience gaine:dfrom a mature 
high-volume manufacturing base pioneered by Intel in 
the 19708. 


Data 
retention 
and lifetime reliability statistics for 
ETOX III flash are equivalent to those of EPROM. 
Representing the third generation of Intel flash memo- 
ry technology, the ETOX III 0.8,... process provides 
< 100 FITS (failures in time) @ 55°C in a specification 
t~~t de~v~rs 100,000 write cycles per block. This capa- 
bility Significantly exceeds the cycling requirements of 
even the most demanding applications, 


For example, code storage for embedded control pro- 
grams used in standard computer applications is infre- 
quently updated. Twenty-year system lifetimes may re- 
quire fewer than 100 rewrites. Even routinely-changed 
data tables (used in navigational computers and black 
box controllers) only require about 1,000 write cycles 
over a 20-year period. The most demanding flash mem- 
ory application of all, archival data storage in PC appli- 
cations, typically requires about 5,000write cyclesin 20 
years. 


ETOX flash memory's simple single-transistor cell 
structure makes it smaller than other flash cells, allow- 
ing designers to create highly integrated systems which 
are more reliable and cost-effectivethan those based on 
more complex and less mature flash technologies. The 
inherent scalability of ETOX III Flash Memory and 
high-volume manufacturing is enabling a correspond- 
ing downtrend in flash cost. 


Flash memory has added a new dimension to nonvola- 
tile memory applications. Embedded systems, such as 
PC BIOS, hard disk drive controllers and cellular tele- 
phone applications take advantage of the easy update 
capability, high density and high performance of Intel 
Flash Memory. Today's new generation of portable 
computers require the optimum combination of per- 
formance, size,weight, low power and shock resistance. 
Whether implemented in memory cards, solid state 
disks or at the component level, Intel's Flash Memories 
are also enabling a whole new generation of mobile 
computers. 


IMPLEMENTING 
INTEL FLASH 
MEMORY 


Today, Intel continues to serve both updatable nonvol- 
atile memory applications as well as the rapidly emerg- 
ing solid-state mass storage applications with flash 
memory solutions tailored to meet the needs of these 
markets. 


Code and data storage comprise the updatable nonvola- 
tile memory applications that require high perform- 
ance, high density, and easy update capability. Because 
these applications are not updated as frequently as sol- 
id-state mass storage applications, erase/write cycles 
are not as critical as integration and performance re- 
quirements. This application segment is served effec- 
tively with full chip-erase or Boot Block products. 


•Based on 10MB card design, 5,000 cycle yields 50,000 MB of stored 
data, which far exceeds most usage environments and file system 
methodologies. 


Intel's 28FooIBX I Mbit Boot Block flash component, 
featuring a sectored architecture, has been widely ac- 
cepted in embedded code storage applications, particu- 
larly in PC BIOS and cellular communications. By 
adopting Boot Block for their products, over 20 PC 
manufacturers have gained added flexibility and the 
ability to differentiate in a highly competitive market. 
End users also benefit from the ability to upgrade BIOS 
software quickly and securely. The blocked architec- 
ture allows the OEM to store critical system code se- 
curely in the lockable "boot block" of the device that 
can minimally bring up the system and download to 
other locations of the device to initialize the system. 
The hardware boot locking feature guarantees that even 
if the power is disrupted during a BIOS update, the 
system will be able to recover immediately. 


In response to customer requests for speed, density,low 
power, surface-mount options and an industry-standard 
upgrade path for portable computing and telecommuni- 
cations, Intel more recently introduced the 2 Mbit 
28F2ooBX and 4 Mbit 28F400BX Boot Block prod- 
ucts. 


These products offer 60 ns performance; two surface 
mount packages: 4O-leadTSOP (X8 only) and 44-lead 
PSOP; and a proprietary Boot Block architecture simi- 
lar to the I Mbit Boot Block device. The Boot Block 
stores the code necessary to initialize the system, while 
parameter blocks can be used to store manufacturing 
product code, setup parameters, and frequently updat- 
ed code such as system diagnostics.The main operating 
code is stored in the main blocks. Both devices are 
available in a x16/x8 ROM-compatible pin-out in 
44-lead PSOP surface mount packaging. These pinouts 
and packages allow an easy upgrade from 2 Mb to 
4 Mb, since only one address is added to the 4 Mb 
device. 


This major application segment requires very high den- 
sity memory, automated programming and high-per- 
formance erase/write capability at a very low cost per 
bit. Erasing and writing portions of the code or data is 
much more frequent in solid-state mass storage than in 
updatable firmware applications. 


Intel's symmetrically blocked 8 Mbit 28F008SA Flash- 
File™ memory is the highest density nonvolatile read/ 
write solution for solid-state mass storage. What's 
more, it is the first flash memory device optimized for 
solid-state storage of software and data files. 


The 28F008SA is packaged in an advanced 4O-Iead 
TSOP (thin, small outline package) or 44-lead PSOP 
(plastic SOP) to provide the extremely small form fac- 
tor required for today's handheld, pen-based and sub' 
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notebook portable computers. The compactness of an 
8 Mbit device in a TSOP package allows for high-densi- 
ty flash arrays to be included both on a system mother- 
board for direct execution of user programs or operat- 
ing systems, as well as memory cards for transportable 
program and me storage. 


Intel's family of flash memory cards provides the most 
reliable and rugged form of removable memory media. 
High density, true nonvolatility, rewrite flexibility, and 
proven cost effectiveness make Intel Series I Flash 
Memory Cards the ideal medium for storing and updat- 
ing application code as well as capturing data. 


For file storage applications that require high perform- 
ance, ruggedness, long battery life, small size and light 
weight, 
Intel's 
Series 2 Flash 
Memory 
Cards 
in 
4-Mbyte, IO-Mbyte and 20-Mbyte densities provide the 
best solution. Based on Intel's 8-Mbit FlashFile memo- 
ry components, the Series 2 card's block-erase function- 
ality and high density take full advantage of flash filing 
systems like Microsoft"s Flash File System software to 
provide full disk emulation in the form of removable, 
nonvolatile 
storage. 
The 
cards 
conform 
to 
the 
PCMCIA 
2.0/JEIDA 
4.1 68-pin standards 
and are 


compatible with Intel's Exchangeable Card Architec- 
ture (ExCATM) to ensure system-to-system interopera- 
bililty. 


THE IMPETUS 
BEHIND 
THE "SOLID· 
STATE" 
DISK 


Because the disk-based PC is so prevalent and eminent- 
ly familiar to both designers and end-users, many of 
today's portable systems still rely on it as their primary 
medium. At the same time, disk drive manufacturers 
have made great strides toward improving the reliabili- 


ty, size and performance of their sylOtems,as well as the 
disk media themselves. 


Yet the disk drive is an electro-mechanical system with 
inherent limitations. Any mechaniClI1hardware is much 
more vulnerable than solid state SI~miconductortech- 
nology to the shock, vibration, and impurities that por- 
table PCs encounter during normal use. Hard disk 
drives can typically withstand up to 1008 of operating 
shock; Intel FlashFile memory, with no moving parts, 
can withstand as much as lOOOOs.Additionally, Intel's 
Series 2 Memory Cards feature approximately 1.6 mil- 
lion hours mean time between faill11'e(MTBF). Such 
endurance and reliability is essential for many of to- 
day's truly mobile handheld 
pain:top and notebook 
sized PCs, particularly within applications requiring ex- 
treme data integrity. 


Power consumption is another major consideration for 
today's mobile PC designer and user. The drive typical- 
ly requires anywhere from 3 watts to as many as 
8 watts of power to run-which 
means rapid drain of 


the system's batteries. Compare this to flash memory in 
a hard disk configuration. It const.mes less than one 
two-hundredth 
the average power of a comparable 


magnetic disk drive based on the typical user model. At 
the chip level, the 8 Mbit FlashFil: 
Memory compo- 


nent has a DEEP' POWERDOWN 
mode that reduces 


power consumption to less than 0.2 fJ-A. 


Additional shortcomings of disk drives are their size, 
weight and floor costs. Magnetic drives do not scale 
well, that is, it becomes increasingly difficult to im- 
prove or even retain density as platter size shrinks. 
Thus, every reduction in drive size requires complete 
retooling and costly learning. Also, the complex con- 
troller circuitry provides a price floor under which 
magnetic drives cannot drop. Since llash is scalable, at 
some point in the near future, small rnagnetic drives are 
likely to become more expensive pel Mbyte than flash 
cards and are certain to have less capacity. 


Disk/DRAM 
Flal;h 


Average 
Seek Time 
28.0 ms 
0 


Latency 
8.3ms 
0 


Data Transfer 
Rate 
Read: 
8 Mbits/sec. 
106.7 Mbils/sec. 
Write: 
8 Mbits/sec. 
1 Mbitlsec. 
... 
Now Read from RAM 
Direct Proces:wr 
Access 


Total Time to Access 
37.3 ms 
O.077ms 
(1 Kbyte File) 


From a performance standpoint, 
disk-based systems 
still require some form of supplementary memory that 
is directly executable. Typically, DRAM is used for ex- 
ecutable code storage and data manipulation. 
Data 


from the disk is downloadable into the DRAM cache 
before users can access the information. Then when a 
"save" operation is desired, the data is uploaded from 
DRAM back into the disk. This download/upload 
pro- 


cess slows down system throughput 
while the redun- 
dant memory media produce even more system over- 
head in the form of added space, power consumption 
and weight (Figure 4). 


Today's 
pes 
are 
typically 
configured 
with 
4 Mbytes-8 Mbytes of DRAM backed up by at least a 
4O-Mbyte disk. FlashFile memory fully supports this 
system configuration when used simply as a magnetic 
drive 
replacement. 
Instructions 
and 
data 
are 
still 
swapped to DRAM, but at a faster rate. Plus execution 
speed can be enhanced if the DRAM is replaced with 
SRAM. 


In the solid-state computer, the "DRAM + magnetic 
hard 
drive" 
is replaced 
by a 
"flash 
memory 
+ 
SRAM". The key to this architecture is the ability to 
eXecute-In-Place (XIP). Program instructions stored in 
flash memory are read directly by the processor. Re- 
sults are written directly to the flash memory. Com- 
pute-intensive operations that require the fastest memo- 
ry access and 
byte-alterability 
can 
use high-speed 
SRAM or pseudo SRAM. Some of the system DRAM 
can be replaced by low-cost flash and a small part of 
the DRAM can be replaced by SRAM. The flash mem- 
ory space is made even more storage efficient through 
the use of compression techniques which may offer up 
to 2:1 compression. 


SOFTWARE 
DEVELOPMENTS 
POSITION 
FLASH FOR PORTABLE 
APPLICATIONS 


The majority of today's portable computers and sup- 
porting software programmers are designed to run us- 
ing Microsoft's MS-DOS' 
disk operating system. MS- 
DOS was developed to allow broad-based compatibility 
between systems and software and to optimize the sec- 
toring scheme inherent to disk technology. 


Intel's Flash Memory, based on a block-erase architec- 
ture, divides the flash memory into segments that are 
loosely analogous to the zones recognized in MS-DOS. 
Thanks to recent software developments, flash memory 
can effectively serve as the main memory within porta- 
ble computers, providing user functions virtually identi- 
cal to, and even improved over, those of disk-based sys- 
tems. 


Specifically, 
two 
recent 
developments 
allow 
this 


achievement: DOS in ROM-executable form (DOS was 
formerly designed to be stored on disk and then down- 
loaded to/executed out of RAM); and a file system de- 
signed for flash memory technology that allows the de- 
vices to erase blocks of memory instead of the whole 
chip. 


ROM-executable DOS provides several benefits to both 
system manufacturers and ultimately end users. First, 
since most of the operating system is composed of fixed 
code, the amount of system RAM required to execute 
DOS is reduced from 50K to 15K, thereby conserving 
system space and power. Secondly, DOS can now be 
permanently 
stored in and executed from a single 


ROM-type of device-flash 
memory-so 
systems come 


ready to run. Lastly, users enjoy "instant on" perform- 
ance since the traditional disk-to-DRAM boot function 
and software downloading steps are eliminated. 


For example, by storing application software and oper- 
ating system code in a Resident Flash Array (RFA), 
users enjoy virtually instant-on performance and rapid 
in-place code execution. An RFA also protects against 
software obsolescence because it is in-system updatable. 
Resident software, stored in flash rather than disk, ex- 
tends battery life and increases system reliability. 


Since erasing and writing data to flash memory is a 
distinctly different operation than rewriting informa- 
tion to a disk, new software techniques were necessary 
to allow flash to emulate disk functionality. File man- 
agement software like Microsoft"s 
Flash File System 


(FFS) allows Intel's Flash Memory components and 
flash cards to emulate the file storage capabilities of 
disk. Microsoft's FFS transparently handles data swaps 
between flash blocks similar to the way MS-DOS han- 
dles swaps between disk sectors. Under FFS, the user 
may input a MS-DOS or Windows' command without 
regard for whether a flash memory or magnetic disk is 
installed in the system. The FFS also employs wear-lev- 
eling algorithms that prevent any block from being cy- 
cled excessively, thus assuring millions of hours of reli- 
ability. Flash filing systems make the management of 
flash memory devices completely transparent 
to the 


user. 


Intel Flash Memory presents an entirely new memory 
technology alternative. As a high-density, nonvolatile 
read/write technology, it is exceptionally well-suited to 
serve as a solid-state disk or a cost-effective and highly 
reliable replacement for DRAMs and battery-backed 
static RAMs. Its inherent advantages over these tech- 
nologies make it particularly useful in portable systems 
that require the utmost in low power, compact size, and 
ruggedness while maintaining high performance and 
full functionality. 


Intel Flash Memory offers: 
• Inherent 
Nonvolatility: 
Unlike static RAMs, 
no 
backup battery is required to ensure data retention. 
In contrast to DRAMs, flash requires no disk to 
provide backup storage of data, programs or files. 


• Cost·Effective 
High Density: 
Today, 
Intel flash 
memories cost about the same as DRAMs 
and 
about one fourth of SRAMs on a per-bit basis. The 
broad acceptance of flash is driving manufacturing 
volumes up and costs down at an unprecedented 
rate, allowing flash to soon compete on a cost basis 
even with disk drive within the notebook, sub-note- 
book and palmtop markets. 


• Solid·State Performance: Because it is a semicon- 
ductor technology, flash memory consumes much 
less power, is much lighter in weight and is smaller 
and more shock-resistant 
and reliable than 
disk 
drives. Mobile computers no longer have to drain 
the battery to run a disk drive motor or accommo- 
date the disk assembly's added bulk and weight. 
Now users no longer have to be threatened with the 
possibility of losing their data after a disk crash 
when conditions become unusually rough. 


• Direct Execution: Since no disk-to-DRAM 
down- 


load step, seek or latency times are incurred with 
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flash memory, users enjoy significantly higher speed 
program and file access, as well as systems that turn 
on instantly to wherever the user left off. 


• Easy Updatability: Unlike other nonvolatile memo- 


ry technologies-ROM 
that can never be altered af- 


ter it is manufactured or EPROM that can only be 
erased by removing it from the system and exposing 
it to ultraviolet light-flash 
can be erased and repro- 


grammed electrically while resid(;nt in the host sys- 
tem. 
• Software Compatibility: 
With Flash File System 


software and ROM-executable v(:rsions of the disk 
operating system (DOS), complett: software compat- 
ibility between a user's desktop and portable system 
is ensured. 


• Exchangeable 
Card 
Architecture 
(ExCATM): 


Through Intel's ExCA card interface standard, In- 
tel's flash memory cards meet all specifications of 
PCMCIA 2.0, ensuring interchangeability between a 
host of PCMCIA-compatible 
systems. 


• Family of Products: Intel Flash Memory products 


are currently available in compon,mt densities up to 
8 Mbits, and in 4-Mbyte, lO-Mbyte and 20-Mbyte 
memory cards. Additionally, Intel offers Boot Block 
devices in densities up to 4 Mbits. 
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Intel flash memory is rapidly being incorporated into a 
wide range of applications, adding enhanced capability 
to existing "traditional" memory. markets, and creating 
new markets that exploit its benefits. Sometimes the 
design platforms may not possess the low powered l2V 
supply for writing flash memory. The system design 
engineer then needs to identify a power conversion so- 
lution with features and capabilities matching the needs 
of the application. For example, portable equipment re- 
quires a power supply converter that minimizes size 
and weight, maximizes efficiency to extend battery life, 
and can be switched into a standby mode to conserve 
power. 


The following pages present some state of the art DC- 
DC converter solutions. These new solutions are small- 
er and more efficient than those typically seen in the 
past. Each of these solutions optimizes a subset of all 
possible power converter features. The choice of an op- 
timal solution for a given application will be a tradeoff 
between several attributes. The solutions shown should 
meet the conversion needs of the majority of applica- 
tions involving flash memory. Specifically, the solutions 
that follow encompass the following five categories: 


• SV to l2V conversion 
• 3V (2 alkalinelNiCd 
cells) to l2V conversion 
• 3V (2 AlkaiinelNiCd 
cells) to SV conversion 
• Downconverting to l2V from a higher voltage 
• Converting l2V unregulated to l2V regulated 


More than one solution is presented within each of 
these categories. These different solutions have distinct 
optimal features/advantages. 
The optimal attributes of 
each solution are outlined. In addition, the appendix 
contains a survey of all solutions presented here, and 
provides a basis for comparing their features. The read- 
er should reference it to choose an optimal solution for 
hislher application. 


NOTE: 
Solutions were selected from products offered by over 
thirty DC-DC converter vendors. Since this industry 
develops many new solutions each year, Intel recom- 
mends that designers contact vendors for latest prod- 
ucts. Intel will continue to work with the industry to 
develop optimum solutions for power conversion. Intel 
Corporation 
assumes no responsibility for circuitry 
other than circuitry embodied in Intel products. No 
other circuit patent licenses are implied. 


2.0 
INTEL FLASH MEMORY POWER 
REQUIREMENTS 


Intel flash memory is powered by two sources; a SV 
Vcc line and a 12V Vpp line. VCCis the primary pow- 
er source and the only power source needed to read the 
memory. Vpp is required when writing or erasing the 
memory. 


vcc supplies power to the flash device during all oper- 
ational modes. Maximum Vcc current is demanded by 
the device during the read operation. The data sheets 
for all Intel flash memory devices at the time this appli- 
cation note was written specify a maximum read cur- 
rent (led of 30 mA at SV ± 10%. This is the guaran- 
teed worst case DC Vcc current that may be required 
by a flash device for reading one byte of data. If multi- 
ple components are read simultaneously, the Vcc cur- 
rent requirement increases proportionately. Vcc toler- 
ance must be maintained to within specification limits 
at all times for proper functioning of the device. 


The supplemental Vpp source provides the higher volt- 
ages needed to carry out the erase, erase verify, pro- 
gram, and program verify operations. Maximum Vpp 
current is typically demanded during the program and 
erase modes. Data sheets for all Intel flash memory 
devices at the time this application note was written 
specify a maximum Ipp current of 30 mA at 12V ± S% 
for both program and erase operations. This is the 
guaranteed worst case Vpp supply current that will be 
required by a flash device for writing one byte of data 
or erasing one block/component. 
If multiple compo- 


nents are programmed/erased 
simultaneously, the cur- 


rent requirement increases proportionately. Vpp must 
be maintained to within specification limits at all times 
during device program, and erase. The tolerance speci- 
fication on Vpp must be strictly maintained. Over-volt- 
age can damage the device, and under-voltage can de- 
crease specified device reliability. Although the l2V 
supply must meet these worst case specifications, power 
usage will typically be much lower. The lower typical 
values seen in the data sheets should be used in calcu- 
lating typical battery life. 


2.1 
Supplies for Battery Powered 
Applications 


In applications where batteries are the primary source 
of power, the power supplies providing Vcc and Vpp 
need to be selected very carefully. Optimized operating 
efficiency of these supplies is important to extend bat- 
tery life. Another attractive feature is the capability of 
these supplies to be switched into a very low power 
shutdown mode. It is important to minimize this shut- 
down current consumption as well since flash memory 
Vpp generators will often be in this state for extended 
periods of time. Moreover, since these supplies are used 
in equipment that is physically small and space-con- 
strained, size and height of the supply need to be mini- 
mized. 


Where two alkalinelNiCd batteries are used as the pri- 
mary source of power, the primary voltage varies de- 
pending on the type and the state of discharge of the 
batteries. For example, alkaline batteries start life off at 
l.5V, but may still retain a significant amount of energy 
when the voltage falls to l.OV with use, and will work 
all the way down to O.8V. On the other hand, NiCd 
cells 
maintain 
a 
near 
constant 
voltage 
of 
1.25V 
throughout 
most of their discharge cycle, and work 
down to I.OV.A solution that derives Vcc or Vpp from 
2 AA batteries must hence be capable of doing so from 
an input voltage that lies in the range of l.6V to 3.0V. 


It is best to directly convert the primary battery voltage 
into the various voltages needed throughout the system. 
A step conversion (e.g. a 3V to 5V converter for Vcc, 
followed by a 5V to 12V converter for Vpp) is not rec- 
ommended, since the inefficiency involved in each con- 
version step combines into one large inefficiency for the 
sum 3V to 12V conversion. Section 4 presents appropri- 
ate 3V battery to 12V converter solutions. Most of the 
solutions presented in this application note, while spe- 
cifically designed for battery powered applications, are 
also viewed as ideal for other applications that incorpo- 
rate flash memory. 


The solution to fmding the right power supply for flash 
memory lies in picking the right DC-DC converter for 
the job. Two broad categories of DC-DC converters 
available in the market today can be applied towards 
this purpose. These are the low power hybrid DC-DC 
converter module (or modular solution), and the low 
power discrete switching regulator IC solution. 
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The modular solution generally consi!,ts of a push-pull 
(Royer type) oscillator built around au isolation trans- 
former, and in some cases followed by a linear regula- 
tor; all of which is encapsulated withh a module. This 
hybrid module includes all componmts 
that are re- 
quired by the DC-DC converter, and so no additional 
design effort is needed. The input and output voltages 
are fixed, and the input and output are almost always 
isolated via the isolation transformer. The main advan- 
tage of these solutions is that no design effort and! or 
external components are involved. They simply plug 
into a socket on a PC board. Disadvantages include 
lower efficiency (generally 60%), larger sizelheight (in 
most cases), and higher cost (generally 3x to lOx the 
cost of discrete solutions). 


It would seem that the integration inherent in these 
solutions contributes towards system reliability, howev- 
er the type and quality of the discrete \:omponents used 
internal to these hybrid devices is open to question. The 
isolation offered between the input and output is viewed 
as overkill for flash applications, since:the total power 
required is typically less than IW. Note also that the 
isolation transformer is often the main reason for the 
lower efficiencies. 


The Discrete Switching 
Reg ulator 
Solution 


The discrete switching regulator IC solution consists of 
a DC-DC converter IC (containing a switching regula- 
tor controller and an output power sw.tch), along with 
a few discrete external components (inductor, diode, 
capacitors, resistors, etc.). The layout of the power sup- 
ply system in this case is mostly left up to the user. 
However, application notes and data sheets explain the 
design process, and provide recommended circuits for 
commonly used solutions. The design can be tailored to 
deliver different output voltages and cllrrent levels de- 
pending on the characteristics of the input voltage and 
the external components. 


Some vendors offer fixed output volta.~e versions, fur- 
ther simplifying the design process. The newer genera- 
tion of high frequency low power switching regulator 
ICs are specifically targeted at battery powered opera- 
tion, and most can be switched into a low quiescent 
current shutdown mode to extend battery life. These 
have typical efficiencies in the 75% to 90% range. Fur- 
thermore, the higher switching frequenc:iesof these new 
parts (typically 100 KHz to 200 KHz) allow the use of 
smaller external components, which are available in 
surface mount varieties. As a consequence, these newer 
solutions are overall much smaller thar. what was typi- 
cally seen just a year ago. 


Several attributes of a power supply converter must be 
evaluated and prioritized when choosing the best solu- 
tion for a given application. These attributes include: 


• Input Voltage Range 
• Output Voltage and Tolerance 
• Output Current Capability 
• Efficiency of Conversion 
• Printed Circuit Area 


• Height 
• Total Cost 
• Shutdown Capability 
• Quiescent Current Consumed in Shutdown Mode 


• Rise Time from Shutdown 
• Surface Mountability 


The reader is referred to Appendix B, which provides a 
survey of all the solutions that are presented in this 
application note, in order to compare their attributes. 


This application note primarily presents state of the art 
discrete switching regulator IC solutions which have 
been carefully designed for operation with flash memo- 
ry. Included along with schematics are component val- 
ues and sources/contacts 
for obtaining all the compo- 
nents. Actual layouts have also been included where 
possible. These are provided in Appendix F. 


NOTE: 
External 
components 
recommended 
in the designs 


should be used. These components (inductors, capaci- 
tors, resistors) were chosen based on recommendations 
by the converter IC vendors and provide the necessary 
quality 
for a clean design. Alternate 
"equivalent" 


parts should be chosen with care as their resistive and 
inductive elements can affect the operation of the solu- 
tion. Please contact the respective converter IC com- 
panies for assistance if you select an alternate value/ 
source for passive components. 


3.0 
Vpp SOLUTIONS: 
CONVERTING 
UP FROM 5V 


Most computer systems have available a 5V Vcc line 
that is used for the majority of system power. Frequent- 
ly, this 5V supply is used to generate 12V for flash 
memory. This section presents some of the new state of 
the art solutions that can achieve this function. These 
are all discrete switching regulators that optimize dif- 
ferent attributes, mentioned along with the main fea- 
tures section of each example. Refer to Appendix B for 
a more detailed comparison of the attributes of these 
solutions. 


111.5% 


R2 


+ C4 
.I O.lJ.lF 


OPTIONAL 
FILTER 
._---------- 


• Highest Efficiency 
• Low Shutdown Current 
• Wide Input Voltage Range 


• All Surface Mount 


• Input Voltage Range: 4V to 7.5V 
• Output Voltage: 12V ±4% 
• Output Current Capability: Up to 120 mA 
• Typical Efficiency: 90% at ILOAD = 60 mA 


• 
170 KHz Operation 
• Shutdown Feature On Chip 
• Low Quiescent Current at Shutdown: 70 /LA typical 
• Low Operating Quiescent Current: 1.6 mA typical 


• Rise Time from Shutdown: I ms Typical 
• Will Work off Existing 5V Supply or a 6 NiCd Bat- 
tery Pack 
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The MAX732 design as shown is caJ:able of providing 
up to 120 mA of Vpp current at an efficiency of 90%. 
The 5V input should be able to source the peak currents 
and start-up currents required by the circuit. This con- 
verter circuit can also run directly c,ff a 6 cell NiCd 
pack present on many notebook/laptop computers. It is 
available in a 16-pin wide SOIC package, and uses 
small external surface mount components (5 in all). 
Voltage spikes may be present in n.e output due to 
incorrect layout, excessive output filtl~rcapacitor ESL 
(Equivalent 
Series Inductance) 
and diode switching 


transients. The optional filter circuit is recommended to 
eliminate any sharp transients. 
The supply can be 
switched into a shutdown Imode whenl the output volt- 
age falls to approximately VCC - 
550 mY. A layout is 


presented in Appendix F. ApplicatiOn!,assistance and a 
surface mount evaluatio~ kit is also available from 
Maxim. 


Ref 
Part # 
Value/Type 
Source 
Cost' 


U1 
MAX732CWE 
SMPS IC 
Maxim 
$2.50 
(408) 7~7-7600 


C1 
267M1002-336-MR-720 
33/LF/10V 
Matsuo 
$0.31 
Tantalum 
(714) 969-2491 


C2 
267M1602-336-MR-720 
33/LF/16V 
Matsud 
$0.31 


Tantalum 
(714) 969-2491 


C3 
C4532COG1 H472K 
4700 pF 
TDK 
I 
$0.04 


(708) 803-6100 


C4 
GRM40Z5U104M050AD 
0.1 /LF 
Murata Erie 
$0.06 
(404) 436-1300 


R1, R2 
9C08052A 1ROOJLR 
1.0.0.,5% 
Philips 
$0.04 


(817) 325-7871 


01 
MBRS120T3 
Schottky 
Diode 
Motorola 
$0.30 
(800) 521-6274 


L1 
CD54-180 
18/LH 
Sumida 
$0.38 


(708) 956-0666 


Total Cost 
$3.93 


.. 


+ Cl 
.I. 22!'F/l0Y 
TANT 


FB 
8 
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7 


AO 
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5 


LT1110-12 


01 


10,5% 
C3 
O.l!'FI 


OPTIONAL 


FILTER 
.._------ 


Optimal 
Attributes 


• Small Size: 0.45 sq. in. Total Board Area (Single 
Sided) 


• Very Low Shutdown Current: 16 JA-A 


• All Surface Mount 


• Input Voltage Range: 4.5V to 5.5V 
• Output Voltage: 12V ± 5% 
• Output Current Capability: Up to 120 mA 
• Typical Efficiency: 76% 
• 60 KHz Operation 
• Shutdown Possible Using External Components as 
Shown 
• Low Quiescent Current at Shutdown: 16 JA-Atypical 
• Rise Time from shutdown: 800 JA-stypical 


The Linear Technology LTlllO-l2 
is a fixed 12V out- 


put part which is well suited to flash memory applica- 
tions. The part is available in a small 8-pin surface 
mount (S08) package. The part needs 7 external com- 
ponents to implement a small size 5V to 12V converter 
solution that can be shutdown to a very low quiescent 
current state-l6 
JA-Atypical. The 5V source must be 


capable of supplying the instantaneous 
start-up 
and 


peak currents required during operation. Voltage spikes 
may be present in the output due to incorrect layout, 
excessive output filter capacitor ESL (Equivalent Series 
Inductance) and diode switching transients. The op- 
tional RC filter circuit is recommended in order to 
eliminate these sharp transients. The output voltage 
during 
shutdown 
falls 
to 
approximately 
VIN 
- 


550 mY. A recommended board layout appears in Ap- 
pendix F. Applications assistance is available from Lin- 
ear Technology Corporation. 


• 


Ref 
Part # 
Value/Type 
Source 
Cost· 


U1 
LT1110-12 
SMPS IC 
Linear Tech 
$2.60 
(408) 954-8400 


C1 
267M1002-226-MR-720 
22 /LF/10 V 
Matsuo 
$0.23 
Tantalum 
(714) 969-2491 


C2 
267M1602-336-MR-720 
33 /LF/16 V 
Matsuo 
$0.31 
Tantalum 
(714) 969-2491 


C3 
GRM40Z5U 
104M050AD 
0.1 /LF 
Murata Erie 
$0.06 
(404) 436-1300 


D1 
MBRS120T3 
Schottky 
Diode 
Motorola 
$0.30 
(800) 521-6274 


L1 
CDR105-470 
47 /LH Shielded 
Sumida 
$0.40 


(708) 956-0666 


R1 
9C08052A3001JLR 
3 KO, 5% 
Philips 
$0.02 
(817) 325-7871 


R2 
9C08052A1002JLR 
10 KO, 5% 
Philips 
$0.02 
(817) 325-7871 


R3,R4 
9C08052A 1ROOJLR 
10,5% 
Philips 
$0.04 
(817) 325-7871 


U2 
MMBT4403L 
T1 
2N4403 
PNP 
Motorola 
$0.09 
Transistor 
(800) 521-6274 


Total Cost 
$4.07 
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._------- 


• Smallest Size 
• Low Shutdown Current 
• All Surface Mount 


• Input Voltage Range: 4.5V to 5.5V 
• Output Voltage: l2V ±5% 
• Output Current Capability: Up to 60 mA 


• Typical Efficiency: 84% 
• 130 KHz Operation 
• Shutdown Feature On Chip 
• Low Quiescent Current at Shutdown: 375 J.LA 
typical 


• Rise Time from shutdown: 800 J.Lstypical 
• Small Size: S08 plus 4 small external components 


The Linear Technology LTll09-l2 
is a fixed l2V out- 


put part which is very well suited to flash memory ap- 
plications. The part is available in a very small 8-pin 
surface mount (S08) package. The part needs just 4 
small external components to implement an extremely 
small size 5V to 12V converter solution that can be 
shutdown to a low quiescent current state--375 
J.LA 


typical. The 5V source must be capable of supplying the 
instantaneous start-up and peak currents required by 
the operation. Voltage spikes may be present in the out- 
put due to incorrect layout, excessive output filter ca- 
pacitor ESL (Equivalent Series Inductance) and diode 
switching transients. The optional RC fllter circuit is 
recommended in order to eliminate these sharp tran- 
sients. The output during shutdown falls to approxi- 
mately VIN - 
550 mY. A typical board layout is pre- 


sented in Appendix F. Applications assistance is avail- 
able from Linear Technology Corporation. 


Ref 
Part 41 
Value/Type 
Source 
Cost· 


U1 
LT1109-12 
SMPS IC 
Linear Tech 
$2.37 
(408) 432-1900 


C1 
267M1002-226-MR-720 
22J.LF/10VTant 
Matsuo 
$0.23 
Chip Capacitor 
(714) 969-2491 


C2 
267M2502-106-MR-720 
10J.LF/25VTant 
Matsuo 
$0.29 
Chip Capacitor 
(714) 969-2491 


C3 
GRM40Z5U104M050AD 
0.1 J.LF 
Murata Erie 
$0.06 
(404) 436-1300 


D1 
MBRS120T3 
Schottky Diode 
Motorola 
$0.30 
(800) 521-6274 


R1, R2 
9C08052A 1ROOJLR 
1.0.,5% 
Philips 
$0.04 


(817) 325-7871 


L1 
CD54-330 
33 J.LH 
Sumida 
$0.32 
(708) 956-0666 


Total Cost 
$3.61 


intel~ 
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• Lowest Cost 
• Very Low Shutdown Current 
• All Surface Mount 


The Motorola MC34063A solution presented uses II 
small sized external components to implement a low 
cost surface mount 5V to 12Vconverter solution. Three 
external components (U2, R4, R5) are used to shut 
down supply to the part when Vpp is not needed. These 
could be eliminated to further lower the cost if power 
consumption is not important. The quiescent current in 
shutdown state is a low 25 /-LA. The output voltage in 
shutdown is VCC - 
550 mY. Voltage spikes may be 


present in the output due to incorrect byout, excessive 
output filter capacitor ESL (Equivale t Series Induc- 
tance) and diode switching transients. The optional RC 
filter circuit is recommended in order to eliminate these 
sharp transients. 
Applications assistance is available 


from Motorola. 


• Input Voltage Range: 4.5V to 5.5V 
• Output Voltage: 12V ±5% 
• Output Current Capability: Up to 120 mA 
• Typical Efficiency: 80% 


• 
100 KHz Operation 
• Shutdown Feature Using External Components 
• Low Quiescent Current at Shutdown: 25 /-LA typical 


• Rise Time From Shutdown: 2 ms typical 
• S08 Plus II Small External Components-All 
SMD 


Ref 
Part 41 
Value/Type 
Source 
Cost' 


U1 
MC34063AD 
SMPS IC (S08) 
Motorola 
$0.63 
(800) 521-6274 


A1 
9C08052A9100JLA 
910,5% 
(Philips 
$0.02 
(817) 325-7871 


A2 
9B08053A 1723FCB 
172 KO, 1% 
(Philips 
$0.04 
(817) 325-7871 


A3 
9B08053A2002FCB 
20 KO,1% 
Philips 
$0.04 
(817) 325-7871 


A4 
9C08052A3001JLA 
3 KO, 5% 
Philips 
$0.02 
(817) 325-7871 


A5 
9C08052A1002JLA 
10 KO, 5% 
Philips 
$0.02 
(817) 325-7871 


A6, A7 
9C08052A1AOOJLA 
10,5% 
Philips 
$0.04 
(817) 325-7871 


C1 
267M1002-336-MA-720 
33,uF/16V 
Matsuo 
$0.28 
Tantalum 
(714) 969·2491 


C2 
267M1602-336-MA-720 
33,uF/16V 
Matsuo 
$0.31 
Tantalum 
(714) 969-2491 


C3 
GAM40X7A301 
M050AD 
300 pF 
Murata Erie 
$0.03 
(404) 436-1300 


C4 
GAM40Z5U104M050AD 
0.1 ,uF 
Murata Erie 
$0.06 
(404) 436-1300 


01 
MBAS120T3 
Schottky 
Diode 
Motorola 
$0.30 
(800) 521-6274 


'L1 
CD54-470 
47,uH 
Sumida 
$0.37 
(708) 956-0666 


U2 
MMBT4403L T1 
PNP Transistor 
Motorola 
$0.09 
(800) 521-6274 


Total Cost 
$2.25 


4.0 
Vpp SOLUTIONS: 
CONVERTING 
UP FROM 2 NiCdl ALKALINE 
CELLS 


voltage is down near 1.8V. Currently there exist two 
good solutions that achieve a l2V output with inputs as 
low as 1.8V, and yet supply at least 30 mA of current. 
These are the LTlllO-12 from Linear Technology Cor- 
poration, and the MAX732 from Maxim Integrated 
Products. 
Palmtop computers that use 2 alkaline/NiCd 
batteries 
require that the system work even when the battery 
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FILTER 
.._------ 


• Smallest Size 
• Low Shutdown Current 
• All Surface Mount 


• Input Voltage Range: 2.0V to 3.1V 
• Output Voltage: 12V ± 5% 
• Output Current Capability: Up to 30 mA 
• Typical Efficiency: 70% 


• 60 KHz Operation 
• Shutdown Mode Using External Components 
• Low Quiescent Current at Shutdown: 16 p.A typical 
• Rise Time from Shutdown: 4 ms typical 


The LTlllD-12 
from Linear Technolo@yCorporation, 


as shown, can be used to generate Vpp from an input 
voltage between 2.0V and 3.1V (most of the usable life 
of 2 alkalinelNiCd cells in series). This design is similar 
to the 5V to 12V converter design presented in Section 
3.2. Replacing Ll and C2 with a lower 
J nductance and 


a higher capacitance, respectively, allows the part to 
work down to 2.0V, while reducing the output current 
capability to 30 mA. The external PNP transistor is 
used to shut off the input supply to th€:converter IC, 
and puts the part in shutdown state. Note that a disad- 
vantage of this scheme of shutdown is t:llat the control 
signal source sinks approximately 
5 rnA (Vcc/IK) 


when the part is not in shutdown. Howt:ver, the quies- 
cent current in shutdown state is a low 16 p.A. See 
Appendix E for an alternate shutdown solution. The 
output voltage in shutdown falls to approximately VIN 
- 
550 mV. Voltage spikes may be present in the output 


due to incorrect layout, excessive output filter capacitor 
ESL (Equivalent Series Inductance) and diode switch- 
ing transients. The optional RC filter circuit is recom- 
mended in order to eliminate any sharp transients. A 
surface mount layout appears in Appendix F. 


Ref 
Part 
11 
Value/Type 
Source 
Cost· 


U1 
LT1110-12 
SMPS IC 
Linear Tech 
$2.60 
(408) 954-8400 


C1 
267M1002-220-MR-720 
221J.F/1OV 
Matsuo 
$0.23 
Tantalum 
(714) 969-2491 


C2 
267M1602-470-MR-720 
471J.F/16V 
Matsuo 
$0.47 


Tantalum 
(714) 969-2491 


C3 
GRM40Z5U104M050AD 
0.11J.F 
Murata Erie 
$0.06 


(404) 436-1300 


01 
MBRS120T3 
Schottky 
Diode 
Motorola 
$0.30 
(800) 521-6274 


L1 
CD54-220 
221J.H 
Sumida 
$0.37 


(708) 956-0666 


R1 
9C08052A3001JLR 
3K.o.,5% 
Philips 
$0.02 


(817) 325-7871 


R2 
9C08052A1002JLR 
10 K.o., 5% 
Philips 
$0.02 


(817) 325-7871 


R3,R4 
9C08052A 1ROOJLR 
1.0.,5% 
Philips 
$0.04 
(817) 325-7871 


U2 
MMBT4403LT1 
2N4403 
PNP 
Motorola 
$0.09 


Transistor 
(800) 521-6274 


Total Cost 
$4.20 
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• Highest Efficiency 
• All Surface Mount 


The MAX732 circuit as shown here ca:nprovide up to 
30 mA at 12V from an input voltage as low as 1.8V. 
Note that the chip itself is powered fmm the 5V VCC 
line required to use present day flash memory devices, 
whereas the inductor is connected to the primary bat- 
tery supply. Voltage spikes may be pre:;ent in the out- 
put due to incorrect layout. excessive output filter ca- 
pacitor ESL and diode switching transients. The op- 
tional RC filter circuit is recommended in order to 
eliminate these sharp transients. Applications assist- 
ance and an evaluation kit is available from Maxim. 


Main Features 


• Input Voltage Range: 1.8V to 5.0V 


• Output Voltage: 12V ±4% 
• Output Current Capability: Up to 30 mA 
• Typical Efficiency: 87% 


• 
170 KHz Operation 
• Shutdown Mode On Chip 
• Low Quiescent Current at Shutdown: 45 /loAtypical 
• Rise Time from shutdown: 25 ms typical 


Ref 
Part II 
Value/Type 
Source 
Coat· 


U1 
MAX732CWE 
SMPSIC 
Maxim 
$2.50 


(408) 737-7600 


C1, C2 
267M 1002-336-MR- 
720 
33 JLF/10V 
Matsuo 
$0.56 


Tantalum 
(714) 969-2491 


C3 
267M 1002-475-MR-720 
4.7 JLF/10V 
Matsuo 
$0.20 


Tantalum 
(714) 969-2491 


C4 
GRM40X7R473M050AD 
47 nF 
Murata Erie 
$0.08 


(404) 436-1300 


C5,C8 
GRM40Z5U104M050AD 
0.1 JLF 
Murata Erie 
$0.12 


(404) 436-1300 


C6,C7 
267M 1602-336-MR-720 
33 JLF/16V 
Matsuo 
$0.62 


Tantalum 
(714) 969-2491 


R1, R2 
9C08052A1ROOJLR 
Hl,5% 
Philips 
$0.04 


(817) 325-7871 


D1 
MBRS120T3 
Schottky 
Diode 
Motorola 
$0.30 


(800) 521-6274 


L1 
CD54-330 
33 JLH 
Sumida 
$0.38 


\ 
(708) 956-0666 


Total 
Coat 
$4.80 


intel~ 


Cl 
H/,F/l0V.I 


U1 


C4 
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O.l/,FI 


OPTIONAL 


FILTER 
._------ 


Optimal 
Attributes 


• Highest Efficiency 
• 60 rnA Output Current Capability 


• Input Voltage Range: 1.8V to 5.0V 
• Output Voltage: l2V ±4% 
• Output Current Capability: Up to 60 mA 
• Typical Efficiency: 87% 


• 
170 KHz Operation 
• Shutdown Mode On Chip 
• Low Quiescent Current at Shutdown: 45 /LA typical 
• Rise Time from shutdown: 75 ms typical 


The MAX732 circuit as shown here can provide up to 
60 mA at l2V from an input voltage as low as 1.8V. 
This solution is similar to the previous one presented 
but is not entirely surface mountable, because of the 
larger output and input filter capacitors. Currently, it is 
the only solution employing a single IC that can pro- 
vide 60 rnA at l2V from a 1.8Vinput. The 470 /LF/16V 
filter capacitor must be a low-ESR (Equivalent Series 
Resistance) type. Voltage spikes may be present in the 
output due to incorrect layout, excessive output filter 
capacitor ESL (Equivalent Series Inductance) and di- 
ode switching transients. The optional RC filter circuit 
is recommended in order to eliminate these sharp tran- 
sients. Applications assistance and an evaluation kit is 
available from Maxim. 


• 


Ref 
Part II 
Value/Type 
Source 
Cost" 


U1 
MAX732CWE 
SMPSIC 
Maxim 
$2.50 
(408) 737-7600 


C1 
267M1002-336-MR-720 
33 p.F/10V 
Matsuo 
$0.31 
Tantalum 
(714) 969-2491 


C2 
UPR1A151MPH 
150 p.F/10V 
Nichicon 
$0.10 


(708) 843-7500 


C3,C7 
GRM40Z5U 
104M050AD 
0.1 p.F 
Murata Erie 
$0.12 
(404) 436-1300 


C4 
267M 1002-1 06-MR-720 
10 p.F/10V 
Matsuo 
$0.21 


Tantalum 
(714) 969-2491 


C5 
GRM40X7R473M050AD 
47 nF 
Murata Erie 
$0.08 
(404) 436-1300 


C6 
UPR1C471MPH 
470 p.F/16V 
Nichicon 
$0.14 


(708) 843-7500 


R1, R2 
9C08052A 1ROOJLR 
10,5% 
Philips 
$0.04 


(817) 325-7871 


01 
MBRS120T3 
Schottky 
Diode 
Motorola 
$0.30 
(800) 521-6274 


L1 
CD75-470 
47 p.H 
Sumida 
$0.38 


(708) 956-0666 


Total Cost 
$4.15 


vCC SOLUTIONS: 
CONVERTING 
UP FROM TWO NiCdl ALKALINE 
CELLS 


tion to provide 
the Vcc supply for the system as well as 


flash memory. 
Two good solutions 
are offered currently 


for this purpose, 
the MAX658 
from Maxim 
Integrated 


Products 
and 
the 
LTlllO-5 
from 
Linear 
Technology 


Corporation. 
Palmtop 
and 
hand-held 
computers 
that 
use two 
AA 
size NiCd 
or alkaline 
batteries 
need 
a converter 
solu- 
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I FILTER 
.._------- 


• Highest Efficiency 
• 250 mA Output Current Capability 


• Low Shutdown Current 


• Input Voltage Range: 2.0V to 3.IV 
• Output Voltage: 5V ± 10% 
• Output Current Capability: Up to 250 mA 
• Typical Efficiency: 85% 


• 
18 KHz Operation 
• Shutdown Mode On Chip 
• Low Quiescent Current at Shutdown: 80 JLA typical 
• Rise Time from shutdown: 25 ms typical 


The MAX658, available from Maxim Integrated Prod- 
ucts in a 14-pin surface mount package. is a good high 
current 
solution for obtaining Vcc from a pair of 


NiCd/aikaline 
cells. The entire solution, however, is 


not 100% surface mountable. It uses a high current 
through-hole inductor and a large through-hole filter 
capacitor at the output. Voltage spikes may be present 
in the output due to incorrect layout, excessive output 
filter capacitor ESR (Equivalent Series Resistance) and 
diode switching transients. The optional RC filter cir- 
cuit is recommended in order to eliminate any sharp 
transients. Applications assistance and an evaluation 
kit are available from Maxim. 


• 


inteJ~ 


Ref 
Part # 
Value/Type 
Source 
Cost' 


U1 
MAX658 
SMPS IC 
Maxim 
$2.45 


(408) 737-7600 


C1 
UPR1A471MPH 
470,...F/10V 
Nichicon 
$0.12 


LowZ 
(708) 843-7500 


C2 
267M1602-105-MR-720 
1 ,...F/16V 
Matsuo 
$0.15 


Tantalum 
(714) 969-2491 


C3 
GRM40X7R102M050AD 
1 nF 
Murata Erie 
$0.03 


(404) 436-1300 


C4 
GRM40Z5U104M050AD 
0.1,...F 
Murata Erie 
$0.06 


(404) 436-1300 


R1, R2 
9C08052A 1ROOJLR 
1.n,5% 
Philips 
$0.04 


(817) 325-7871 


D1 
MBRS120T3 
Schottky 
Diode 
Motorola 
$0.30 


(800) 521-6274 


L1 
LCM1812R-102K 
1.0mH 
Inductor Supply Inc. 
$0.22 


Chip Inductor 
(800) 854-1881 


L2 
RCH110-330 
33,...H 
Sumida 
$0.40 


(708) 956-0666 


U2 
MTD3055E 
NFET 
Motorola 
$0.70 


(800) 521-6274 


Total Cost 
$4.47 
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• Smallest Size 
• Low Shutdown Current 
• All Surface Mount 


• Typical Efficiency: 76% 
• 60 KHz Operation 
• Shutdown Mode Using External Components 
• Low Quiescent Current at Shutdown: 16,..,A typical 


• Rise Time from Shutdown: 4 ms typical 


• Input Voltage Range: 2.0V to 3.IV 
• Output Voltage: 5V ±5% 
• Output Current Capability: Up to ISOmA 


The LTlIlO-5 
from Linear Technology is a fixed 5V 


version of the converter shown for the 12V design in 
Section 4.1. 


Ref 
Part II 
Value/Type 
Source 
Cost" 


U1 
LT1110·5CS8 
SMPSIC 
Linear Tech 
$2.60 
(408) 954-8400 


C1 
267M1002· 
226·MR-720 
22,..,F/10V 
Matsuo 
$0.23 
Tantalum 
Chip 
(714) 969-2491 


C2 
267M1602· 
476-MR-720 
47,..,F/16V 
Matsuo 
$0.47 


Tantalum 
Chip 
(714) 969-2491 


C3 
GRM40Z5U104M050AD 
0.1,..,F 
Murata Erie 
$0.06 
(404) 436-1300 


D1 
MBRS120T3 
Schottky 
Diode 
Motorola 
$0.30 
(800) 521-6274 


L1 
CD75-330 
33,..,H 
Sumida 
$0.38 
(708) 956-0666 


R1 
9C08052A3001JLR 
3 KO, 5% 
Philips 
$0.02 


(817) 325-7871 


R2 
9C08052A 1002JLR 
10 KO, 5% 
Philips 
$0.02 
(817) 325-7871 


R3,R4 
9C08052A 1ROOJLR 
10,5% 
Philips 
$0.04 
(817) 325-7871 


U2 
MMBT4403LT1 
PNP Transistor 
Motorola 
$0.09 
(800) 521-6274 


Total Cost 
$4.21 


The ability to down-convert to 12V from a higher volt- 
age is often needed (as in the telecommunications envi- 
ronment). This section presents some good solutions for 
obtaining Vpp from a higher voltage. 


Ul 


1 
DO 
IN 
2 
OUT 
LBO 
3 
LBI 
SET 


4 
GND 
SHDN 


t.lAX667 


+ C1 
R1 
.I.47 I"r/16V 
402k,l% 
- 


• Small Size 
• Ultra Low Shutdown Current 


• All Surface Mount 
• Very Low Dropout 


• Output Current Capability: Up to 120 mA 


• Typical Efficiency: 70% 
• Shutdown Mode On Chip 
• Low Quiescent Current at Shutdown: 0.2 J.LA 


Typical 
• Rise Time from Shutdown: Less than 0.1 ms Typical 


• Input Voltage Range: 12.IV to 16.5V 
• Output Voltage: 12V ±5% 


Ref 
Part IF 
Value/Type 
Source 
Cost' 


U1 
MAX667CSA 
SMPS IC- 
Maxim 
$2.10 


S08 Package 
(408) 737-7600 


C1 
267M1602-476-MR-720 
7 J.LF/16V 
Matsuo 
$0.47 


Tantalum 
(714) 969-2491 


R1 
9C08053A4023JLR 
402Kn,1% 
Philips 
$0.03 


(817) 325-7871 


R2 
9C08053A4752JLR 
47.5 Kn,1% 
Philips 
$0.03 


Total Cost 
$2.63 


Cl 
+ 
15J'F/35V.I. 


TANT 


Rl 
IsDn 


Ul 


1 
IUW 
FB 
2 
V1N 
SET 
3 
SWI 
AD 
4 
SW2 
GNO 


+ C2 
47 J'F/16V 


• High Efficiency 
• All Surface Mount 
• Input Voltage Range: 16V to 30V 
• Output Voltage: 12V ± 5% 
• Output Current Capability: Up to 120 mA 


• Typical Efficiency: 80% 


Ref 
Part II 
Value/Type 
Source 
Cost' 


U1 
LT1111-12 
SMPS IC- 
Linear Tech 
$2.20 
S08 Package 
(408) 432-1900 


C1 
267M3502-225-MR-720 
2.2 JLF/35V 
Matsuo 
$0.28 
Tantalum 
(714) 969-2491 


C2 
267M 1602-4 76-MR-720 
47 JLF/16V 
Matsuo 
$0.47 


Tantalum 
(714) 969-2491 


R1 
9C08052A1500JLR 
1500.,5% 
Philips 
$0.02 
(817) 325-7871 


L1 
CDR105-470 
47 JLH 
Sumida 
$0.38 
(708) 956-0666 


D1, D2 
MBRS140T3 
Schottky 
Diode 
Motorola 
$0.60 
(800) 521-6274 


Total Cost 
$3.95 


• 


Vpp 


+ C2 
22 JlF/16V 


• Input Voltage Range: l3V to 26V 


• Output Voltage: 12V ±3% 
• Output Current Capability: IA 


The LM2949CT-12 is a low drop-out linear regulator 
from National Semiconductor. This is a good low cost 
fixed 12V output solution. The part is offered in a stan- 
dard TO-220 plastic package. The input capacitor is 
required only if the regulator is located far away from 
the input power supply filter, and the 0 utput capacitor 
must be at least 22 JLF in order to maintain stability . 


Ref 
Part # 
Value/Type 
Source 
Cost" 


U1 
LM2940CT-12 
Voltage Reg TO-220 
National 
$0.95 


(408) 721-5000 


C1 
GRM43-2Z5U4 74M050AD 
0.47 JLF/50V 
Murata Erie 
$0.07 


(404) 436-1300 


C2 
267M1602·226-MR-720 
22 JLF/16V 
Matsuo 
$0.28 


Tantalum 
(714) 969-2491 


Total Cost 
$1.30 


7.0 
OBTAINING Vpp FROM 12V 
UNREGULATED 


In systems like the desktop computer, a 12V supply 
exists but may not be regulated to ± 5%. If this voltage 
is used as the Vpp source for flash memory, it may well 
degrade the write/erase performance ofthe memory, or 
adversely affect its reliability. Fortunately, in most of 
the situations where a 12V unregulated (or not regulat- 
ed to within 5%) supply exists, a 5V supply also exists 
in the system (the desktop computer is a good exam- 
ple). It is recommended in such cases that the existing 
5V supply be used to obtain the 12V ± 5% rail. This 
approach is more economical, more efficient, and pro- 
vides space savings over a buck-boost topology that 
takes unregulated 12V and regulates it to ± 5%. 


In the rare case where a 5V supply is not present, mod- 
ular solutions exist that will regulate the unregulated 
12V supply to ± 5%. However, these are bulky and 
expensive. Moreover, many of them require that a mini- 
mum load be maintained in order to stay in regulation. 
One such solution in presented in Appendix A. 


For battery powered applications, the author views the 
discrete switching regulator 
Ie 
solution as a better 


choice than the modular solution. The lower cost, high- 
er efficiency, and smaller sizelheight associated with 
discrete solutions justify the small additional design ef- 
fort required to incorporate them in flash memory ap- 
plications. In applications where the primary source of 
power is a wall power outlet, or in applications where 
the flash memory will be written to infrequently, effi- 
ciency and quiescent current take on secondary impor- 
tance. In such cases, it may be acceptable to use a 12V 
regulated (to within ± 5%) tap from the system supply. 
Alternatively, the ability to easily design-in modular so- 
lutions may outweigh the disadvantages of lower effi- 
ciency and increased cost. For those users wishing to 
incorporate modular solutions, Appendix A provides 
some of the lower cost solutions from this industry seg- 
ment. 
• 


APPENDIX 
A 
MODULAR SOLUTIONS 


Modular solutions may work well in non-battery pow- 
ered situations where the efficiency of the power supply 
converter is not critical. These are also advantageous in 
that they usually do not need any external components 
and there is no converter design involved. However, the 
type and quality of the discrete components used in 
these hybrid solutions is open to question. This is not 
true in the case of the discrete converter designs pre- 
sented in the earlier sections, where the quality of the 
components used are under the control of the system 
design engineer. Hence, even though modular solutions 
offer the convenience of a single package and ease of 
testability, the quality/reliability 
of comparably priced 
modular solutions may be questionable. 


Some modular solutions suited to flash memory appli- 
cations are presented below, with a brief description of 
each. Sources for obtaining these are listed in Appendix 
B. 


A.1 
International 
Power/Newport 
Components 
NMF0512S 


The NMF0512S is a 5V to 12V hybrid power module 
that has an output current capability of 80 mA. Output 
tolerance is ± 5%. It is equipped with a shutdown pin 
which can be used to switch Vpp off. However, power 
dissipated in the shutdown 
mode is relatively high 
(about 100 mW). The part is small in size and measures 
0.76 in. (19.5 mm) x 0.4 in. (9.8 mm) x 0.4 in. (9.8 mm), 
and costs about $7.90 in 10K quantities (at the time 
this application note was written). Typical efficiency of 
conversion is 62%. 


The Xentek NPSC-0512S is a IW powc:r module that 
converts 5V to Vpp and will source up to 80 mA of 
continuous current. However, it uses twe external filter 
capacitors-<me 
at the input and one at ('Ie output. The 


input filter capacitor is 47 jJoF/IOV,and the output fil- 
ter capacitor is 100 jJoF/16V.Size of the solution (con- 
verter alone) is 0.87 in. (22 mm) x 0.39 in. (10 mm) x 
0.79 in. (20 mm). The NPSC-0512S does not have a 
shutdown mode. The part costs around $5.00 in 10K 
quantities (at the time this application note was writ- 
ten). Typical efficiency of conversion is f)()%. 


A.3 
Shindengen 
America Inc~. 


HDF-0512D 


The HDF-0512D module from Shindengc:nwill convert 
unregulated 12V to 12V ± 5%. This part is a dual out- 
put part (± 12V), but only the + 12V line is used. The 
conversion efficiency is high (75% typical), and the 
part will provide a regulated Vpp volta,se from input 
voltages as low as 8V, and as high as 16.5V. A mini- 
mum load of 5 mA needs to be maintained to guarantee 
regulation. Size of the solution is 1.75 in. (44 mm) x 
0.43 in. (II mm) x 0.8 in. (20 mm). Cost is approxi- 
mately $10.00 in quantities of 10K (at the time this 
application note was written). 


Ref 
Vendor 
Part # 
InputC 
Output V OutputC 
Effie 
# ExtComp 
100% 
Coat 
PC Area 
Height 
SHDN? 
ISHDN 
RTlme 
Temp 
# 
Name 
(Volta) 
(Volta) 
(mA) 
(%) 
(Note 1) 
SMD? 
(Note 2) (Note 3) 
(In) 
(Note 4) (NoteS) 


3.1 
Maxim 
MAX732 
4V-7V 
12V,4% 
120 
90 
5; 0, L, 3C 
Ves 
$3.93 
0.56 
0.18 
Ves 
70/LA 
1 ms 
O'C, +70'C 


3.2 
LinearTech 
LT1110-12 
5V,10% 
12V,5% 
120 
76 
7; 0, L, T, 2A, 2C 
Ves 
$4.58 
0.45 
0.20 
Ves 
16/LA 
1 ms 
O'C, +70'C 


3.3 
LinearTech 
LT1109-12 
5V,10% 
12V,5% 
60 
84 
4; 0, L, 2C 
Ves 
$3.61 
0.38 
0.18 
Ves 
375/LA 
1 ms 
O'C, +70'C 


3.4 
Motorola 
MC34063A 
5V,10% 
12V,5% 
120 
75 
11; 0, L, T, 3C, 5A 
Ves 
$2.25 
0.49 
0.18 
Ves 
25/LA 
2ms 
O'C, +70'C 


4.1 
LinearTech 
LT1110-12 
2V-3.1V 
12V,5% 
30 
70 
7; 0, L,T, 2A, 2C 
Ves 
$4.71 
0.45 
0.18 
Ves 
16/LA 
4ms 
O'C, +70'C 


4.2 
Maxim 
MAX732 
1.8V-4V 
12V,4% 
30 
87 
9; 0, L, 7C, 
Ves 
$4.80 
0.7 
0.18 
Ves 
45/LA 
25ms 
O'C, +70'C 


4.3 
Maxim 
MAX732 
1.8V-4V 
12V,4% 
60 
85 
8; 0, L, 6C, 
No 
$4.15 
1.11 
0.49 
Ves 
45/LA 
75ms 
O'C, +70'C 


5.1 
Maxim 
MAX658 
2V-3.1V 
5V,5% 
250 
85 
7; 0, 2L, T, 3C 
No 
$4.47 
0.92 
0.39 
Ves 
80/LA 
25ms 
O'C, +70'C 


5.2 
LinearTech 
LT1110-5 
2V-3.1V 
5V,5% 
150 
76 
7; 0, L, T, 2A, 2C 
Ves 
$4.72 
0.45 
0.20 
Ves 
16/LA 
1 ms 
O'C, +70'C 


6.1 
Maxim 
MAX667 
12.1V-16V 
12V,5% 
250 
75 
3;2A, C 
Ves 
$2.73 
0.25 
0.15 
Ves 
0.2/LA 
0.1 ms 
O'C, +70'C 


6.2 
LinearTech 
LT1111-12 
16V-30V 
12V,5% 
120 
80 
6; 20, L, 2C, A 
Ves 
$3.95 
0.78 
0.2 
No 
N/A 
N/A 
O'C, +70'C 


6.3 
National 
LM294OCT-12 
13V-26V 
12V,3% 
1A 
12IVIN 2;2C 
No 
$1.30 
0.5 
0.18 
No 
N/A 
N/A 
O'C, +70'C 


A.1 International NMF0512S 
5V,10% 
12V,5% 
80 
62 
0 
No 
$7.90 
0.3 
0.40 
Ves 
20mA 
10 /Ls 
- 40'C, + 70'C 
Power 


A.2 Shindengen 
HDF1212D 
8V-16.5V 
12V,5% 
120 
77 
0 
No 
$10.00 
0.76 
0.80 
No 
N/A 
N/A 
-10'C, 
+70'C 


A.3 Xentek 
NPSC-0512S 
5V,10% 
12V,5% 
80 
60 
2;2C 
No 
$5.50 
0.34 
0.79 
No 
N/A 
N/A 
-1Q'C, 
+ 70'C 


NOTES: 
1. 11 External 
components. 
D: Diode, L: Inductor, 
C: Capacitor, 
R: Resistor, 
T: Transistor. 
2. Cost. Cost estimates 
assume 
10K quantities, 
based on published 
pricing at the time this application 
note was written. 
3. PC Area. PC Aarea 
is conservatively 
estimated 
as 2.0x (area of all components). 
Where 
actural 
layouts 
are presented, 
the lower value 
is given. 
Note 
that this estimate 
is for a single sided board, and area can be reduced 
considerably 
if both sides of the board are utilized. 
4. I Shdn. Current 
consumed 
by supply at shutdown. 
Output 
settles 
to VCC at shutdown, 
so some additional 
flash Vpp leakage/standby 
will exist. 


5. R Time. Rise time from shutdown 
state. Erase/Writes 
should 
not be attempted 
till Vpp level has risen to valid level after shutdown 
is disabled. 
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APPENDIX 
C 


SOURCES/CONTACTS 
FOR RECOMMENDED 


DC-DC CONVERTERS 


In Europe <U.K.): 
Maxim Integrated Products (UK), Ltd. 
Tel: (44) (734) 845255 
Recommended Products: 
- 
LTl11D-12 (DC-DC Converter Ie) 


- 
LTl 110-5 (DC-DC Converter Ie) 


- 
LTlI09-12 
(DC-DC Converter Ie) 
- 
LTll11-12 
(DC-DC Converter Ie) 


In Asia (Japan): 
Maxim Japan Co., Ltd. 
Tel: 81 (03) 3232-6141 


In U.S.A.: 
1630 McCarthy Blvd. 
Milpitas, CA 95035-7487 
Tel: (408) 432-1900 
Fax: (408) 432-0507 


Recommended Product: 
- 
MC34063AD (DC-DC Converter IC) 


In U.S.A.: 
616 West 24th Street 
Tempe, AZ 85282 
Tel: (800) 521-6274 


In Europe <U.K.): 
III Windmill Road 
Sunbury 
Middlesex TWI6 7EF 
U.K. 
Tel (44)(932) 765688 
Fax (44)(932) 781936 


In Europe <U.K.): 
Tel: (44) (296) 395-252 


In Asia (Japan): 
Tel: (81) (3) 440-3311 
In Asia (Japan): 
4F Ichihashi B1dg 
1-8-4 Kudankita Chiyoda-ku 
Tokyo 102 Japan 
Tel (81) (03) 3237-7891 
Fax (81) (03) 3237-8010 
Recommended Product: 
- 
LM294OCT-12 (Voltage Regulator Ie) 


In the U.S.: 
2900 Semiconductor Drive 
P.O. Box 58090 
Santa Clara, CA 95052 
Tel: (408) 721-5000 


Recommended Products: 
- 
MAX732 (DC-DC Converter Ie) 
- 
MAX658 (DC-DC Converter Ie) 
- 
MAX667 (DC-DC Converter Ie) 


In U.S.A.: 
120 San Gabriel Drive 
Sunnyvale, CA 94086 
Tel (408) 737-7600 
Fax (408) 737-7194 


In Europe: 
National Semiconductor (UK) Ltd. 
The Maple, Kembrey Park 
Swindon, Wiltshire SN26UT 
U.K. 
Tel: (07-93) 614141 
Fax: (07-93) 697522 


intel~ 


In Asia: 
National Semiconductor Japan Ltd. 
Sanseido Bldg. 5F 
4-15 Nishi Shinjuku 
Shinjuku-ku 
Tokyo 160 Japan 
Tel: (81) (3) 299-7001 
Fax: (81) (3) 299-7000 


Newport 
Componentsl 
International 
Power 


Recommended Product: 
- 
NMF0512S (5V-12V Converter Module) 


In U.S.A.: 
International Power Sources 
200 Butterfield Drive 
Ashland, MA 01721 
Tel: (508) 881-7434 
Fax: (508) 879-8669 


In Europe: 
Newport Components 
4 Tanners Drive 
Blakelands North 
Milton Keynes MK14 5NA 
Tel: (0908) 615232 
Fax: (0908) 617545 


Recommended Product: 
- 
HDF0512D 
(12V unreg. to 
12V reg. converter 
module) 


In the U.S.: 
2649 Townsgate Road #200 
Westlake Village, CA 91361 
Tel: (800) 634-3654 
Fax: (805) 373-3710 


In Europe: 
Shindengen Magnaquest U.K. Ltd. 
Unit 13, River Road, 
Barking Business Park, 
33 River Road, Barking, 
Essex IG11 ODA 
Tel: (44) (81) 591-8703 
Fax: (44) (81) 591-8792 


In Asia: 
2-1,2-Chome Ohtemachi 
Chiyoda-ku 
Tokyo 100 
Japan 
Tel: (81) (3) 279-4431 
Fax: (81) (3) 279-6478 


Recommended Product: 
- 
NPSC0512S (5V-12V Converter Module) 


In U.S.A.: 
760 Shadowridge Drive 
Vista, CA 92083 
Tel: (619) 727-0940 
Fax: (619) 727-8926 


In Europe (Germany): 
Xentek, Inc. 
c/o Taiyo Yuden GMBH. 
Obermaierstrasse 10, 
D-8500 Nurnberg 10 
Federal Republic of Germany 
Tel: (49) (911) 350-8400 
Fax: (49) (911) 350-8460 


In Asia (Japan): 
Xentek, Inc, 
c/o Taiyo Yuden., Ltd. 
6-16-20, Ueno, Taito-ku 
Tokyo 110 
Japan 
Tel: (81) (3) 3837-6547 
Fax: (81) (3) 3835-4752 
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APPENDIX 
D 
CONTACTS 
FOR DISCRETE COMPONENT~) 


Matsuo's 267 series surface mount tantalum chip ca- 
pacitors are recommended by Maxim and Linear Tech- 
nology for input and output filter capacitors on their 
DC-DC converters. Part lis are included on the parts 
list that 
accompanies 
most 
solutions. 
If 
alternate 
"equivalents" are required, choose high reliability, low 
ESR 
(Equivalent 
Series Resistance) 
and 
low ESL 
(Equivalent Series Inductance) type tantalums, which 
help in keeping output ripple and switching noise to a 
minimum. 


In U.S.A.: 
2134 Main St., Ste. 200 
Huntington Beach, CA 92648 
Tel: (714) 969-2491 
Fax: (714) 960-6492 


In Europe: 
Steucon - Center II Mergenthalleralle 77 
D-6236 EschbenlTs. 
Federal Republic of Germany 
Tel: 6196-470-361 
Fax: 6196-470-360 


In Asia: 
Oak Esaka Bldg. 
10-28 Hiroshiba-Cho 
Suita-shi 
Osaka 564 
Tel: (06) 337-6450 
Fax: (06) 337-6456 


Sumida CD series surface mount inductors are recom- 
mended by Maxim, Linear Technology for their minia- 
ture size and relatively low cost. These are well suited 
to low power DC-DC converter applications. Contact 
Sumida Electric directly for procuring these. The part 
lis are included in the parts list that accompanies most 
solutions. In applications where noise (EMn is a con- 
cern, shielded varieties are also offered by Sumida. 


In U.S.A.: 
637 East Golf Road 
Suite 209 
Arlington Heights, IL 60005 
Tel: (708) 956-0666 
Fax: (708) 956-0702 


In Asia: 
4-8 Kanamachi 2-chome, 
Katsushika-ku, 
Tokyo 125 
Japan 
Tel: (81) (03) 3607-5111 
Fax: (81) (03) 3607-5428 


Coiltronix is recommended as a good alternate source 
for surface mount inductors. The CTX :;eriesoffered by 
Coiltronix is well suited to DC-DC cO.llverterapplica- 
tions. These are shielded, and have n toroidal core. 
However, they are bigger in size and currently much 
more expensive (7X to 8X) than the Sumida varieties 
recommended in the solutions herein. The equivalent 
part numbers are: 


Sumida CD54-470 -+ Coiltronix CTX.50-1 
Sumida CD54-180 -+ Coiltronix CTX20-1 
Sumida CD54-220 -+ Coiltronix CTX20-1 
Sumida CD75-470 -+ Coiltronix CTX:50-2 
Sumida CDR105-470 -+ Coiltronix ClrX50-2 


In U.S.A.: 
Coiltronix Inc. 
984 S.W. 13th Court 
Pompano Beach, FL 33069 
Tel: (305) 781-8900 
Fax: (305) 782-4163 


In U.K.: 
Microelectronics Technology Ltd. 
Great Haseley Trading Estate 
Great Haseley 
Oxfordshire OX9 7PF 
U.K. 
Tel: (08) 44 278781 
Fax: (08) 44 278746 


In Asia: 
Serial System 
Mktg. 
Poh Leng Bldg., 
#02-01 
21 Moonstone 
Lane 
Singapore 
1232 
Tel: 2938830 
Fax: 2912673 


Coilcraft 
is 
also 
recommended 
as 
a good 
alternate 


source 
for 
surface 
mount 
inductors. 
The 
N2724-A 


shielded 
series is well suited to DC-DC 
converter 
appli- 


cations. 
These 
are bigger and currently 
more expensive 


(2x to 3x) than 
the Sumida 
inductors 
recommended 
in 


the solutions. 
Contact 
Coilcraft 
directly 
for any appli- 


cations 
assistance 
or for procurement 
of these 
parts. 
The equivalent 
part 
numbers 
are: 


Sumida 
CD54-470 
--+ Coilcraft 
N2724-A 
47 JLH 


Sumida 
CD54-180 
--+ Coilcraft 
N2724-A 
18 JLH 


Sumida 
CDR105-470 
--+ Coilcraft 
N2724-A 
47 JLH 


In the US: 
1102 Silver Lake Road 
Cary, 
IL 60013 
Tel: (708) 639-6400 
Fax: (708) 639-1469 


In Europe: 
21 Napier 
Place 
Wardpark 
North 
Cumbernauld 
Scotland 
G68 OLL 
Tel: 0236 730595 
Fax: 0236 730627 


In Asia: 
Block 
101, Boon Keng 
Road 
#06-13/20 
Kallang 
Basin Industrial 
Estate 
Singapore 
1233 
Tel: 2966933 
Fax: 2964463 


Philips 
Components 
is recommended 
as a good source 


for surface 
mount 
(SMD) 
resistors 
(standard 
9C series, 
and 
9B (MELF) 
series). 
Part 
#s 
are included 
in the 


parts 
list that accompanies 
most of the solutions 
in the 


application 
note. 
Many 
alternate 
sources 
exist. 


In the US: 
2001 W. Blue Heron 
Blvd. 


P.O. Box 10330 
Riviera 
Beach, 
FL 33404 
Tel: (407) 881-3200 
Fax: (407) 881-3304 


In Europe: 
Philips 
Components 
Ltd. 


Mullard 
House 
Torrington 
Place 
London 
WCIE 
7HD 
Tel: (44) 71 5806633 
Fax: (44) 71 636 0394 


In Asia: 
Philips 
K.K. 


Philips 
Bldg. 
13-37 
Kohnan 
2-chome 
Minato-Ku 
Tokyo 
108 
Tel: (81) 3 740-5028 
Fax: (81) 3 740-5035 


Siliconix 
otTers low-"on" 
resistance 
logic level PFETs 


(Si9400, 
and Si9405) 
that 
can be used for switching 
a 


DC-DC 
converter 
into a shutdown 
state by using these 


switches 
on the high side of the input 
to the converter 


(see Appendix 
E). 


In the US: 
2201 Laurelwood 
Road 
P.O. Box 54951 
Santa 
Clara, 
CA 95056-9951 


Tel: (408) 988-8000 
Fax: (408) 727-5414 


In Europe: 
Weir House 
Overbridge 
Square, 
Hambridge 
Lane 


Newbury, 
Berks RGl4 
5UX 
Tel: (0635) 30905 
Fax: (0635) 34805 


In Asia: 
Room 
709, Chinachem 
Golden 
Plaza 


77 Mody 
Road 
TST East Kowloon 
Tel: (852) 724-3377 
Fax: (852) 311-7909 


APPENDIX 
E 
OTHER DESIGN CONSIDERATIONS 


It is often desirable to have, along with the Vpp solu- 
tion, a handshake signal (using extra hardware) that is 
asserted as long as the voltage level on Vpp is valid. 
The following schematic 
illustrates 
a good way of 


achieving this. This handshake signal could be used to 
determine when it is suitable to perform writes/erases 
on the flash device. The circuit shown uses a precision 
zener voltage reference and a comparator, along with 
bias resistors, to monitor the voltage level on Vpp. The 
point at which the comparator trips must be set after 
careful consideration of the variation in the reference 
voltage and the tolerances on the bias resistors. The 
worst case conditions on these variations must guaran- 
tee that the handshake signal is asserted when Vpp is at 
its worst case lower-end level (11.4V). 
Care must be 
taken to use the exact same components as specified in 
order to maintain the tight tolerance on the trip level of 
the output signal. 


E.2 
Obtaining Shutdown 
Using Logic 
LevelPFETs 


Low "on" resistance logic level PFETs can be used on 
the high side of the input to the DC-DC converters to 
obtain shutdown. One such part is the Si9405 from Sill- 
conix Inc. The device is part of the "little foot" series, 
and is available in an S08 (8-pin surface mount) pack- 
age. The Si9405 is a logic level PFET with an "on re- 


sistance" of 0.20 (at a gate drive of 4.~iV).It is impor- 
tant to have as Iowan "on" resistance flS possible, since 
the peak currents and start-up currents into the supply 
are high. Care must be taken to ensure that the DC-DC 
conversion process is not affected after accounting for 
the drop in input voltage across the PIIET. 


E.3 
Working of the DlscrettiJ Step Up 
SWitching Regulator 


This section presents a brief overview of the operation 
of discrete step up switching regulatoJ1l, and presents 
issues that the user needs to be concerned with while 
designing these solutions into the syste::n. 


The four most basic elements of a dillcrete switching 
regulator power supply are: 
I. The SMPS IC (which includes the switch control 


element and logic, along with the power switch it- 
self), 
2. An inductor for storage and transfc:r of energy be- 


tween the input and output, 
3. A switching diode to direct the ind ctor energy to 
"catch", or channel, the inductor energy to the out- 
put, and 
4. An output filter capacitor. 


R3 
100k 


5% 
3 


In the boost configuration 
where the output 
voltage is 
greater than the input voltage, the basic switching pow- 
er supply configuration 
is as shown in Figure E.2: 


Figure E-2. Working 
of the Step-Up 
SWitching 
Regulator 


The power 
switch 
SW can be turned 
on and off; the 


control 
for it is derived 
from 
a feedback 
mechanism 


that 
senses 
the 
output 
voltage. 
While 
the 
switch 
is 


turned 
on, the inductor 
stores 
energy 
as the current 


flows through 
it from the input supply. The peak cur- 


rent through 
the inductor 
IL can be approximated 
as 
(VINIL • toN); where toN is the on time of the switch. 
During 
this time, the energy is supplied 
by the input 


voltage, 
VL = VIN. The output 
is isolated 
from the 


inductor 
via the reverse-biased 
diode, and the load cur- 
rent is supplied by the output filter capacitor. 
When the 


switch 
turns off, the energy stored in the inductor 
ap- 


pears as a rapidly 
increasing 
voltage across the induc- 


tor. As soon as this voltage reaches a value equal to the 
output 
voltage plus the voltage drop across the diode, 
the 
diode 
switches 
on 
and 
current 
starts 
to 
flow 


through 
the diode. This diode current 
supplies the load 
current 
while also at the same time charging 
up the 


output 
filter capacitor 
to the output 
voltage. 


The switch is controlled 
by sensing the output 
voltage 


via a feedback 
mechanism-usually 
a pair of resistors. 


This sense voltage is gated via a comparator 
whose out- 


put acts as a control signal to an oscillator. 
The oscilla- 


tor output 
controls 
the switch. 


The power into the inductor 
PL can be approximated 


as: 


and the power into the load PLOAD (out of the induc- 
tor) can be approximated 
as 


The peak currents 
through 
the inductor 
is usually sev- 


eral times higher than the load current, 
is mostly of the 


value of the load current 
and builds 
up during 
time 


toN' On most of the solutions 
presented 
here, peak op- 


erating 
currents 
lie in the range 
of 500 mA to 1.2A. 


Though 
this may seem high, 
most 
of this in-rush 
of 


energy is transferred 
to the output, 
and little is lost to 


heat due to the efficient energy storage characteristic 
of 


inductors. 
Note that since the peak currents 
are high, 


the input 
voltage 
source 
must 
be capable 
of provid- 


ing 
this 
current, 
and 
the 
current 
capability 
of the 


input 
source 
must 
not 
be 
calculated 
simply 
as 


(VOUT • IOUT)/(VIN 
• Eft). A large bypass capacitor 


at the input pin of the converter 
is hence also necessary 


on all designs. 


Some of the solutions presented 
in this application 
note 


are of the fixed duty cycle or fIXed on time type (e.g. 
LT1IIO-12, 
LT1I09-12, 
MC34063A), 
whereas some of 


them vary the duty cycle depending 
on the load current 


(e.g. MAX732, 
MAX658). 
These 
latter 
ones provide 


higher efficiencies. 


The choice of an inductor 
is crucial to the design of the 


power supply system. To begin with, the inductor 
value 


must be low enough to supply the peak currents 
needed 


when the input voltage VIN, as well as the on time ton, 
are at their worst case low value. On the other 
hand, 


the inductor 
value must 
be high enough 
so that 
the 


peak currents 
at the worst case high values do not ex- 


ceed the maximum 
peak currents 
that can be handled 


by the switch. 
Furthermore, 
once the value has been 


picked, the physical inductor 
that is chosen for the job 


must be able to handle 
these peak currents, 
and must 


not saturate. 
This is done by picking an inductor 
whose 


DC current 
rating 
is more 
than 
the worst 
case peak 


current 
that 
will be required 
by the operation 
of the 


device. The other characteristic 
to consider is the resist- 


ance of the inductor. 
In order to keep losses to a mini- 


mum, it is essential 
that the resistance 
of the coil is a 


minimum. 
Thus, 
it is important 
to use the inductors 


specified 
in the parts 
list that 
accompanies 
the solu- 


tions. These have been carefully chosen after reviewing 
the requirements. 
Alternate 
inductors 
may be used, as 


long as they are "equivalent". 


Since the switching regulators 
presented 
in this applica- 


tion note switch 
at frequencies 
between 
60 KHz 
and 


200 KHz, 
there 
exists a potential 
for EMI. 
In cases 


where EMI may be a problem, 
shielded 
inductors 
can 


be used. This will reduce 
EMI 
significantly. 
Shielded 
versions of the inductors 
specified are readily available. 


Contact 
the vendor directly 
for these. 


Output switching noise has several sources. The most 
significant one is the IR drop through the ESR (Equiv- 
alent Series Resistance) of the output fIlter capacitor. 
This is caused by switching current pulses from the 
inductor. There is also noise in the form of switching 
spikes riding on the DC output. This is due to the out- 
put filter capacitor's 
ESL (Equivalent Series Induc- 


tance), current spikes in the ground trace and rectifier 
turn-on transients. 


It is important to use low ESR and low ESL output and 
input filter capacitors. Proper layout is also essential in 


inteJQP 


order to avoid spikes in the output. TIle safest solution 
is to use a fIlter circuit at the output. LC filters are not 
recommended, because of the transient nature of the 
load currents on flash devices. An RC filter is recom- 
mended on most solutions as an optio::1.Two In resis- 
tors are used in parallel to avoid caU!.inga significant 
drop across the resistance. This method is inexpensive 
and assures that the spikes riding on 1he output wave- 
form are contained to within the 5% tolerance require- 
ment on Vpp. 


In addition, care must be taken to keep the leads from 
the output of the solution to all flash dc~vicesas short as 
possible. Use of a 0.1 /loF capacitor at the Vpp pin of 
each flash device is highly recommended. 


APPENDIX 
F 
PC LAYOUTS FOR SOME RECOMMENDED 
SOLUTIONS 


F.1 
Maxim Integrated 
Products 
MAX732 


The double-sided layout presented below (Figure F-1) 
has been designed for the MAX732 5V-12V converter 
solution (Section 3.1). It is a double sided layout and 
has been designed for the parts specified in the parts list 
that accompanies the solution. Contact Maxim for any 
additional layout assistance. 


F.2 
Linear Technology 
Corporation 
LT1110-12 


The single-sided layout presented below (Figure F-2) 
can be used to implement the LTl11O-12 5V to l2V 


..,1 
r~ •• 


IDA F 
MAXIM 


converter (Section 3.2), the LTll10-12 
3V-12V con- 


verter (Section 4.1), or the LTl110-5 3V to 5V convert- 
er (Section 5.2). The layout has been designed for the 
parts that are specified in the parts list that accompa- 
nies these solutions. Contact Linear Technology for any 
additional layout assistance. 


F.3 
Linear Technology 
Corporation 
LT1109-12 


The single-sided layout presented below (Figure F-3) 
can be used to implement the LTl109-12 5V-12V con- 
verter solution (Section 3.3). The layout has been de- 
signed for the parts that are specified in the parts list 
that accompanies the solution. Contact Linear Tech- 
nology for any additional layout assistance. 
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Flash memory's combination of nonvolatility and easy 
in-system updateability are key attributes driving its 
adoption into today's system designs. However, this 
flexibility also brings with it the responsibility (for 
hardware and software engineers) to ensure that writes 
to flash memory occur only when intended. 
This is espe- 
cially important for those who are accustomed to de- 
signing with various ROM (nonvolatile but non-up- 
dateable) and RAM (updateable but -volatile) memo- 
ries. 


This application note discusses techniques for proac- 
tively designing systems to prevent unintentional writes 
to flash memory. These design techniques are by no 
means complex or costly, but their implementation is 
crucial to ensuring reliable operation through system 
lifetime. For more information on the devices and spec- 
ifications discussed in this document, please consult 
specific flash memory datasheets. 


2.0 
WHY IS WRITE 
PROTECTION 
IMPORTANT? 


Let's begin by identifying the key characteristics of two 
generic memory technologies: ROM (Read-Only-Mem- 
ory) 
and 
RAM 
(Random-Access-Memory). 
Flash 
memory combines many of the capabilities of both in 
one solution. Therefore, it is often being utilized to re- 
place ROM and/or 
RAM in new designs. At a mini- 
mum, flash memory's status as a relatively new tech- 
nology means that many engineers are moving to it 
from the familiarity of a ROM/RAM 
knowledge base. 


RAM is fully alterable on a bit-by-bit basis, and the 
mechanism for writing to it is established and well un- 
derstood. RAM is in-system updateable, yet it is vola- 
tile. This means that when a RAM memory loses pow- 
er, it also loses its data. RAM is guaranteed 
not to 
contain valid information on powerup. 


ROM offers the advantage of nonvolatility, i.e. when 
power is removed from the device, the information 
stored inside is retained. However, ROM is not in-sys- 
tem updateable. Once the information is initially put 
into the device, it is permanent and unchangeable. To 
replace the information, 
you have to physically re- 
move/replace the device itself. 


Traditional system memory architectures often includ- 
ed both ROM (nonvolatile but non-updateable) 
and 
RAM 
(volatile but in-system updateable). The new 
model for system design retains some RAM for tempo- 
rary data storage, but replaces the rest of RAM and 
ROM with flash memory. Being both nonvolatile and 
in-system updateable, flash memory encompasses the 


intel~ 


strengths of both RAM and ROM, om:ring new system 
architecture possibilities. However, whereas in the past 
RAM was guaranteed to be invalid on ,ystem powerup 
and ROM was guaranteed to be unalterable, the same 
cannot be said for flash memory. 


Any alteration 
of flash memory contents 
(whether 
planned or unintended) is permanent rt:gardless of sys- 
tem power transitions, until the data is again modified. 
As we'll see later, command writes to flash memory can 
also put it in modes where it outputs liomething other 
than array data, a non-permanent but ,till undesirable 
condition when not intended. This melITISthat the sys- 
tem hardware 
and software must er._surethat flash 
memory is written only when specifi(:ally desired, to 
ensure a predictable system environmen t. The following 
sections will discuss how this can be a(:complished. 


3.0 
SYSTEM 
WRITES 
WITH 
BULK· 
ERASE FLASH MEMOF:uES 


First-generation bulk erase flash memories from Intel 
Corporation are shown in Figure 1. These devices auto- 
matically power up in a "Read Array" mode in which 
they output array data when read. Transitions to alter- 
nate modes occur by writing commands to the flash 
memory. 


Device 
Density 


28F256A 
32 Kbytes (x8) 


28F512 
64 Kb~tes (x8) 


28F010 
128 Kb~tes (x8) 


28F020 
256 Kbytes (x8) 


Figure 1. Intel Corporatltm 
Bulk·Erase 
Flash Memorl es 


Bulk-erase flash memories include several forms of 
"protection" 
to 
guard 
against 
unin'-ended 
writes. 


Writes with Vpp (the program/erase 
vcltage) at VPPL 
(OV to 6.5V) are disregarded by the flash memory. Sim- 
ilarly, write attempts 
with 
Vcc 
at 
OJ below VLKO 
(2.5V on most devices) are ignored. Finally, these de- 
vices require multi-byte command sequences to initiate 
internal program or erase algorithms. Note, however, 
that while the erase command sequence (shown in Fig- 
ure 2) requires both the proper Erase St:tup and Erase 
Confirm commands, the program sequence (Figure 3) 
relies only on the valid Program Setup <:ommand. The 
second command in the latter sequence can have any 
value, and is interpreted as data to be programmed. 
This means that if the flash memory r&:eives an unin- 
tended Program Setup command, the veri next write to 
the device (intended or not) will be interpreted as pro- 
gram data and initiate an internal proll;ram event (if 
Vpp is above VppL>. 


Erase 
Setup 
(20H) 


Erase 
Confirm 


(20H 
for 
Bulk-Erose, 


DOH for 
Block-Erose) 


Figure 2. Flash Memory 
Erase 
Command 
Sequence 
(Simplified) 


Beyond the program and erase sequences, the Read In- 
telligent Identifier Codes command will, when written 
to the flash memory, put it in a mode where it outputs 
device signature IDs instead of array information when 
read. 


Program 
Setup 


(40H 
for 
Bulk-Erose, 


40H/ 
1OH for 
Block-Erose) 


Program 
Data 
(xxH) 


Figure 3. Flash Memory 
Programming 
Command 
Sequence 
(Simplified) 


4.0 
SYSTEM 
WRITES 
WITH 
BOOT 
BLOCK AND FlashFile™' 
MEMORIES 


Second-generation block-erase Boot Block and Flash- 
File memories from Intel Corporation 
are shown in 
Figure 4. They function similarly to the bulk-erase de- 
vices described earlier, with a few key enhancements. 
As before, these devices automatically 
power up in 


"Read Array" mode, and transition to alternate modes 
via command writes. 


BOOT BLOCK ARCHITECTURE 


Device 
Density 


28FOO1BX 
128 Kbytes (x8) 


28F200BX 
256 Kbytes (x16) 


28FOO2BX 
256 Kbytes (x8) 


28F400BX 
512 Kbytes (x16) 


28FOO4BX 
512 Kbytes (x8) 


FlashFlle™ 
ARCHITECTURE 


Device 
Density 


28FOO8SA 
1 Mbyte (x8) 


Figure 4. Intel Corporation 


Block·Erase 
Flash Memories 


For full access to the flash memory Status Register, as 
well as for enhanced interface to internal device identi- 
fiers, these block-erase flash memories will accept com- 
mands written to them regardless of Vpp voltage, as 
long as Vcc is above VLKO' Program and erase algo- 
rithms initiated by command sequences will terminate 
with Status Register error indication and unaltered ar- 
ray data, ifVpp is at VPPL. However, regardless ofVpp 
level, the device will still transition to a "Read Status 
Register" 
mode after 
program/erase 
co=and 
se- 


quences are written. In this case, it will output data that 
the system, if the write was unintended, will not expect. 
The same multi-byte command sequences (shown in 
Figures 2 and 3) are used as in bulk-erase flash memo- 
ries. 


Boot Block and FlashFile memories provide commands 
(in addition to the program and erase sequences) which 
transition the memory to alternate modes, outputting 
data other than array information for subsequent reads. 
In this respect, they are similar to bulk-erase flash 
memory discussed earlier. These commands are Intelli- 
gent Identifier and Read Status Register. 


Block-erase devices include a hardware 
input called 


RP# 
(or ResetlPowerdown). 
Among its many uses, 


this pin acts as a "master on/off switch" to completely 
disable the flash memory and lock all other control in- 
puts. RP # is extremely effective at blocking unintend- 
ed writes during system power transitions. This tech- 
nique will be covered in detail, in a few paragraphs. 


5.0 
PREVENTING 
UNINTENDED 


WRITES 
DURING 
NORMAL 


SYSTEM 
OPERATION 


Preventing unintended writes to flash memory during 
normal system operation is a routine part of debugging 
a new design, and a common concern for any "writea- 
ble" device on the processor interface. Any combina- 


tion of active chip select (CE#) and active write enable 
(WE #) has the potential of being decoded by the flas~ 
memory as a valid write attempt. One common culpnt 
in these situations is the chip select decoder logic (pAL, 
etc.) between the processor and external devices. As 
addresses propogate through this logic at the beginning 
of an access cycle, or in the undefmed address state 
between accesses, spurious chip selects of indeterminate 
duration can be generated. System hardware should en- 
sure that at these times, WE# to flash memory stays at 
a logic "I" and doesn't transition low. 


Some concern has also been expressed in the past about 
unintended writes in certain "open" systems such as 
the personal computer. In these environments, the type 
and function of software run on the machine is beyond 
the control of the computer manufacturer, 
who must 
accordingly design hislher hardware. For example, a 
third-party software utility may write to flash memory 
assuming DRAM at that location. More malicious, of 
course, is the case of the computer virus. Fortunately, 
in cases like this, hardware design to prevent unintend- 
ed writes is fairly simple. 


WR# 
(FROM 
SYSTEM) =D- 
( 
WE# 
TO FLASH 
GPIO 
MEMORY) 


292123-3 


Figure 5 shows one means of clarifying the WE# 
sig- 
nal. When flash memory is used for BIOS storage, for 
example, the manufacturer's 
update utility is the only 
software that should be writing to the device. By tog- 
gling the general purpose I/O line (whose default state 
is, of course, "disabled"), the update utility can control 
whether writes from the system are blocked or allowed 
to pass to the flash memory. This type of WE# clarify- 
ing function is integrated in the Intel386™SL and In- 
tel486TMSLMicroprocessor Supersets. ASICs integrat- 
ing motherboard functions should also be designed to 
include such logic. 


One other method for preventing flash memory altera- 
tion is by controlling (or "switching") the Vpp voltage, 
turning it on to VPPH only when desired for system 
update. Many 12V converters and power supplies inte- 
grate this on/off function as shown in Figure 6, or it 
can be provided by an external FET. This approach 
will be used again in the next section on write protec- 
tion during system power transitions. Note, however, 
that although it prevents actual flash memory data al- 
teration, Vpp control is insufficient to keep block-erase 
flash memories from transitioning to alternate data out- 
put modes by unintended writes. 
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Figure 6. Vpp 12V Converter 
with 
Integrated 
Switch (Examp!e) 


In a traditional "closed" system, the software directing 
the hardware is totally under control of the system 
manufacturer. 
No additional effort shO'ltldbe needed 
(after the initial prototype hardware and software de- 
bugging) to protect the flash memory from unintended 
writes during normal system operation. Write control 
during system powerup and powerdow[ also requires 
attention, however; a topic covered next. 


6.0 
PREVENTING 
UNINTENII)ED 
WRITES 
DURING 
SYSTI:~M 
RESET AND POWERUP/ 
POWERDOWN 


System powerup and/or powerdown offt:r the greatest 
potential for unintended writes in flash memory-based 
system designs. As mentioned earlier, similar potential 
also exists for other "nonvolatile/rewriteable" 
memory 
technologies, such as EEPROM 
and battery-backed 
SRAM. Several reasons for this are listecl below. 
• When a system begins to power up, all logic outputs 


are at OV. This is also the "enable" condition for 
flash memory CE# 
and WE# inputs 
• Logic devices have specified, documen ted and guar- 
anteed operation only at a specific sItpply voltage 
range (typically 5V ± 10% or 3.3V ± O.3V).Opera- 
tion beyond this voltage range is not guaranteed and 
may not be consistent. Specifically, device output 
behaviour is typically undefmed. 


• Similarly, logic operation is sometimes undefined 
and erratic when devices are being res,::t.For exam- 
ple, MCS-186 embedded processors, when reset, tri- 
state their WR # (write enable) outpu':s, which will 
then typically drift toward OV (or "enabled", 
to 
TTL inputs). 


• If both 
the 
Vcc 
and 
Vpp 
power 
supplies are 


switched "on" at the same time, one or the other is 
likely to ramp to a "valid" level first, depending on 
the relative capacitive loading at the supply outputs. 
Similarly, one supply will often ramp below its valid 
voltage range before the other, on system poweroff. 
This situation is acceptable, as long as the WE# 
and/or 
CElli' signals to the flash memory are con- 
trolled. 


Figure 7 shows a very basic example processor/memo- 
ry interface. When the system power is switched on, the 
processor (or logic) WE# 
output and logic CElli' out- 
put are both at GND. Depending on the processor and 
logic, these outputs may not reliably stabilize until Vcc 
ramps to 4.5V. In most cases, CPU and logic outputs 
will smoothly follow the supply voltage up to operating 
levels. Any oscillations on these outputs, however, can 
be decoded as a valid write by the flash memory, which 
begins to "wake up" below 4.5V V cc. 
Similarly, ad- 
dress and data processor outputs are typically unde- 
fined below operating voltage ranges. Given a x8 inter- 
face between processor and flash memory (therefore, 
with 256 possible combinations of data inputs), there is 
a finite chance that a valid command byte will be ran- 
domly generated and written to the flash memory. 


If the Vpp power supply output is less capacitively 
loaded than Vcc, 
Vpp can ramp above VpPL before 
V cc 
reaches 4.5V. This can cause unintended flash 
memory program and erase if the correct command 
data values are "spuriously" written to the device. 


Again referencing Figure 7, the behaviour of processor/ 
logic CElli', WE# 
and address/data 
outputs are typi- 


cally undefmed once Vcc 
drops below 4.5V. If the 


power supply Vpp output is more capacitively loaded 
than VCc. Vpp can remain above VpPL as VCC decays 
toward av. This has the potential to initiate program/ 
erase operations in response to unintended flash memo- 
ry writes. 


6.1 
Designing for Flash Memory 
System Power Sequencing 
Protection 


Intel has taken several steps with respect to its flash 
memory designs to significantly minimize the possibili- 
ty of an unwanted write during system powerup or 
powerdown. By synergizing system designs to these 
flash memory features, you can easily eliminate the po- 
tential for unwanted 
flash memory mode switching 


and/or data alteration. 


Flash memories from Intel are guaranteed not to pro- 
gram or erase with Vpp below 6.5V. First generation 
bulk-erase devices additionally block all write attempts 
with Vpp below 6.5V. The implication here is clear; if 
possible, don't switch on Vpp until after the system 
Vcc is stable (on powerup), and switch off Vpp before 
the system is powered down. The Vpp supply itself can 
be switched on/off, or an inline FET switch can be 
installed between the power supply output and flash 
memory input and controlled via an I/O line from the 
processor or discrete logic. Figure 6 gives an example of 
circuitry for the former case. 


Figure 8. Supply Voltage/Device 
Output 
Relationship 
During Powerup 


Intel flash memory also provides Vcc-driven "lockout 
protection" 
from unwanted writes. With Vcc 
below 
VLKO, all write attempts to the flash memory are ig- 
nored. VLKO varies between 2.5V and 2.0V depending 
on the specific flash memory, and its value is targeted 
to take advantage of the fact that in most cases device 
outputs closely follow Vcc inputs (both up and down). 
Referencing Figure 8, when Vcc exceeds VLKO,device 
outputs will in most cases also be at approximately 
VLKO, and consequently at a TIL 
"1" level (or dis- 
abled). The flash memory "protects itself' up to VLKO, 
and the system designer must above that point ensure 
that flash memory control inputs are stable. Similarly, 
the flash memory is again protected once Vcc drops 
below VLKO on system powerdown. 


The RP# input (formerly known as PWD#), 
available 
on Intel Boot Block and FlashFile memories, acts as a 
"master on/off switch" for the device. With RP# 
at 
VIL, the flash memory is put in a very low power mode 
called Deep Powerdown, 
and is essentially turned 
"off". In this state, all write attempts to the flash mem- 
ory 
are disregarded. 
RP # 
can be driven 
by the 
POWERGOOD 
output of the system power supply (if 
this output exists) or from an external analog "power 
supply monitoring" device like the Maxim MAX705 or 
Motorola MC34064, providing absolute flash memory 
protection. Figure 9 gives an example system design 


• 
• 
• 
points and tight tolerances, and can be set to the lower 
value of the system logic normal operllting voltage. 


Figure 9. Reset Control 
during 
System 
Powerup 
and PowE!rdown 


Unintended writes to flash memory car., at a minimum, 
cause it to output data that the system does not expect, 
forcing system reset or power sequencing to restore 
normal operation. Depending on the specific data writ- 
ten to the device, and the Vpp voltage a.tthe time of the 
write, actual "permanent" 
alteration (If flash memory 


contents can result from unintended program or erase. 
However, Intel flash memory, in combination 
with 


proper system interfacing techniques, l~.asilyeliminates 
the potential for either of these scenarios. 


Closely analyze the powerup/down and reset behaviour 
of the system CPU and any interface Logicthat inter- 
acts with the flash memory. In the vast majority of 
cases, no problems will be found. If J: otential for un- 
wanted writes does exist, however, nonvolatile/rewrite- 
able memory protection can easily be included if incor- 
porated early in the design, by followi::lgthe hints de- 
scribed in this application note. 
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Recently, several laser printer and printer peripheral 
companies have introduced products that incorporate 
flash memory. Their advertisements validate the unique 
capabilities and benefits that flash memory features 
provide. OEM interest, and predictions by market ana- 
lysts like BIS Strategic Decisions, point to increasing 
future flash memory usage as laser printer manufactur- 
ers continue to differentiate their product lines to meet 
user needs. This application brief discusses the uses and 
benefits of flash memory in laser printer designs. Specif- 
ically, flash memory usage for system code storage, and 
for font and "font-like" data storage, will be highlight- 
ed. 


Within the computer industry, the laser printer market 
is one of the most rapidly growing business sectors. The 
graph of Figure 1 shows growth rate of various market 


Volume 
of Units 
Shipped 
(Thousands) 


segments since 1988, as well as predicted 
growth 


through 1996. Laser printer proliferations are expand- 
ing to capture the needs of more and more user groups. 
Simultaneously, more and more computer 
users are 


turning 
to laser printers 
versus traditional 
"impact 


printer" alternatives, as features proliferate, capabilities 
expand, offices become more automated, 
and 
unit 


prices fall. This combination grows the total number of 
laser printer market segments, as well as the size of 
each segment. 


When a large and steadily increasing supply of poten- 
tial laser printer users exists, the "invisible hands" of 
economics unequivocally dictate that a large number of 
suppliers will appear to service this demand. What does 
this all mean to you, the laser printer manufacturer/de- 
signer? In a word, competition! How can anyone com- 
pany expand (or at a minimum maintain) their market 
share over the efforts of all others? 


III 0-6 
PPt.4 


• 


7-11 
PPt.4 


II 12-19 PPM 


D 20-40 
PPt.4 


Figure 1. Laser Printer U.S. Market Growth 1988-1996 
(BIS Strategic Decisions, 1992) 


One way to do this is by providing equivalent product 
features as all other suppliers, at a lower unit price. 
This is referred to as pricing-driven demand. Unfortu- 
nately, as in the example of the "clone" market in to- 
day's PC industry, pricing-driven demand does not of- 
ten translate 
to long-term rmancial health for your 


company. 


The other method of establishing a leadership image 
(and the preferable means) is by stimulating differentia- 
tion-based demand through key product features that 
uniquely answer market needs. The advantages to this 
approach are many: 
• Product differentiation makes good business market 


share 
sense. 
Uniquely 
meeting 
customer 
needs 
through product features establishes a short-term 
leadership image and the potential for a long-term 
protectable market position. 
• Value-based pricing also makes good business prof- 
itability sense. If product features are chosen care- 
fully, the resultant customer demand allows the sup- 
plier to price comfortably above per-unit cost, guar- 
anteeing profitability and long term business health! 


Flash memory is a key technology whose capabilities 
trendsetting OEMs are exploiting to differentiate their 
current and future laser printer designs. It enables clear 
benefits in system expandability, flexibility, perform- 
ance and ease-of-use; benefits that translate directly to 
customer 
satisfaction 
and 
long-term 
loyalty. 
Flash 


memory combines the attributes of nonvolatility (like 
ROM or EPROM) and in-system updateability (like 
RAM or a hard disk drive), while simultaneously pro- 
viding high density and compatible read performance 
to DRAM. This unique combination of features allows 
flash memory to not only replace more "traditional" 
laser printer memory approaches, but also to enhance 
systems beyond the limitations of these "conservative" 
memory solutions. The remainder of this application 
brief will review the major memory subsystems in to- 
day's laser printer designs, and how flash memory ca- 
pabilities can be applied in each case. 


2.0 
MEMORY USAGE IN LASER 
PRINTERS 


A high-level laser printer block diagram is shown in 
Figure 2. Memory uses in laser printers can be grouped 
in the following three areas: 


• System and PDL (printer description language) em- 
ulation code storage 


• Font (and font-like data type) storage 
• Temporary bitmap image storage and manipulation 


Memory is used differently in each case: therefore opti- 
mum memory features are similarly specialized, even 
within a common memory technology. Semiconductor 
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vendors, for example, have optimized vluious types of 
DRAMs for the applications in which they'll be used. 
Similarly, Intel has optimized unique product "fami- 
lies" within its flash memory line to mal,~hthe require- 
ments of applications like those found in laser printers. 
These product "families" will be referrel! to in the dis- 
cussions below. 


The system code memory stores the software that is 
executed by the embedded processor to IIIl1land control 
the laser printer. This includes code to interface the 
processor with the input/output, 
copl:occssor, print 


drum and motor subsystems. System cod.ememory also 
includes a large amount of software devoted to emulat- 
ing various printer description languaj;;es. The most 
commonly known PDLs are PostScript' 
(pioneered by 


Adobe and currently at version 2.0) and PCL· (printer 
Control Language, pioneered by Hewlett Packard and 
currently at version 5). Beyond these two "industry 
standards", 
dozens 
of additional 
proprietary 
"lan- 


guages" have been developed by various hardware and 
software vendors. 


Depending on the complexity and capabilities of the 
laser printer and the number of supportlld emulations, 
system code size varies. It ranges frOID as little as 
256 Kbytes for an entry-level personal printer to several 
Mbytes for powerful high-end network laser printers. 
The traditional memory technology usel! to store sys- 
tem code is high density ROM (for nonvolatility) shad- 
owed to DRAM on system powerup (for fast read ac- 
cess time). 


Flash memory, when used for system code storage, 
combines the nonvolatility and high dellsity of ROM 
with the fast read performance of DRAM, making the 
ROM/DRAM 
redundancy unnecessary. Additionally, 


the in-system upgradeability of flash memory makes la- 
ser printers flexible and updateable botli. in the manu- 
facturing line at your factory, and once the system is in 
the hands of the end customer. Although the per-device 
cost of flash memory is higher than that I>fROM, flash 
memory's upgradeability can result in 
lL lower system 


cost through a laser printer's operating 1J.fetime. 


Flash memory eliminates costly inventc:,ry of ROMs, 
ROMs that must be scrapped if an enhJlnced software 
version is released or a software "bug" is discovered. 
Using flash memory, one hardware design can service 
multiple markets via simple "end-of-line" 
program- 


ming as the system leaves the factory. Additionally, di- 
agnostic code can be programmed on the assembly line 
for full system debug, and replaced with the final soft- 
ware version later in the manufacturing Ilow. 
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Today, upgradeability once a system reaches the cus- 
tomer's hands is achieved via proprietary, costly add-in 
ROM cards. These emulation modules connect to the 
host system through low-performance interface buses. 
Updating the local code memory in the printer requires 
a technician visit, is very costly to the customer, and is 
therefore rarely done. The result can be a less-than-op- 
timized system with subpar performance, and a dissat- 
isfied customer that will not consider your company for 
hislher next printer purchase! 


Flash memory's in-system reprogramming makes sys- 
tem code upgrade as simple as running an "UPDATE" 
utility on the host computer, and can be done by the 
customer at hislher 
PC using a diskette sent by the 
printer 
manufacturer, 
or a me downloaded from a 
OEM computer bulletin board service. Configuring the 
printer with the exact emulations needed is equally 
straightforward. 
Customer service is perhaps the su- 
preme differentiator 
in multiple-source 
markets. 
As 
companies focus more and more on the customer and 
the service aspects of their business, they will turn to 
flash memory as a means of readily and economically 
achieving their goals. 


Intel's Boot Block flash memory product line has been 
specifically defmed to meet the specific requirements of 
high-density embedded code storage and execution. 
These devices are also available in ROM-compatible 
pinouts. This allows printer OEMs to achieve quick 
time-to-market with rev. 0 software (updateable once 
initial systems are in customer hands) and later convert 
their designs to ROM if desired, once final production 
code is stable. For further information on these prod- 
ucts, reference the Additional Information section at 
the conclusion of this application brief. 


Today's laser printers ship from the factory with a 
number of "resident" fonts stored in nonvolatile ROM. 
The density of this memory varies with the end market 
for the printer. A "Roman" 
set of resident typefaces 
requires anywhere from I Mbyte-2 Mbytes of storage. 
Japanese "Kanjii" fonts, on the other hand, require up- 
wards of 5 Mbytes per typeface. A minimum-config- 
ured laser printer for the Japanese market therefore 
needs 10 Mbytes-20 
Mbytes of resident font memory. 


Additional permanent font storage is often available 
through ROM font cartridges, similar to the "emula- 
tion" fonts mentioned earlier. Finally, software such as 
Adobe Type Manager" 
and Microsoft" 
TrueType" 
downloads font information to the printer, storing it in 
volatile DRAM. This latter temporary font data is lost 
when the printer is turned off or reset. Resets can oc- 
cur, for example, each time the printer output jams, or 
when the paper supply is depleted. 


Computer users are more and more outgrowing the ca- 
pabilities of the resident ROM fonts stored in their la- 
ser printers, or available through the ROM expansion 
font cartridges. ATM and TrueType am enabling these 
users to customize their documents by ',arying not only 
font size and attributes, 
but also the font typefaces 


themselves. Many corporations have d(:veloped custom 
fonts for use by their employees for a l:onsistent docu- 
mentation "look and feel". These uniq·.letypefaces are 
not a part of the resident standard typeface set. Finally, 
not only fonts, but also graphic bitmap 
(corporate lo- 


gos, bitmapped signatures, etc.) and p.1ge layout tem- 
plates are being integrated into desktop-published doc- 
uments. All of this non-resident infomlation must be 
repeatedly downloaded from the host c:omputer to the 
printer DRAM after each printer poweroff or reset. 
Since this download is accomplished \ ia the serial or 
parallel connection, print performance is dramatically 
and negatively impacted, especially not.ceable in a net- 
worked printer arrangement. 


Flash memory, with its unique set of attributes, com- 
bines the best qualities of today's font and template 
storage solutions while incorporating 
none of their 


weaknesses. Like DRAM, it is in-sys'.em updateable 
and has comparable per-device cost at higher densities. 
Like ROM, it is nonvolatile. Like both of these technol- 
ogies, it is a very dense storage medium, available in 
sizes up to I Mbyte per component, anc 20 Mbytes per 
card, at the time this application note was written. 
Where extremely high density memory is needed, as in 
the case of Kanjii font storage, flash memory compo- 
nents have an over 2oo,OOOxfirst read access advantage 
and an over 14x data transfer performance advantage 
over hard disk drives. The performance of a printer 
computing subsystem is significantly hindered by the 
slow access time of a HDD. Flash m(:mory, with its 
sub-lOOns read speed, is the superior solution. 


A resident high-density array of flash memory is cou- 
pled directly to the CPU local bus for h:lghestperform- 
ance. It allows the customer to exactlJ' configure the 
printer font, bitmap graphic and page template infor- 
mation for hislher 
specific application>. This data is 


downloaded to the printer once, and from that point on 
is always available for use, even after the printer is 
turned off or reset. If expanded printer usage (as in a 
network 
environment) 
requires 
additional 
resident 


"font" storage in the future, easy dem:ity upgrade is 
enabled by designing in a PCMCIA memory-I/O card 
socket, again interfacing directly to the embedded proc- 
essor bus. Plugging in a flash memory ,~ard means no 
printer c1isassemblyis required! 


Intel's FlashFile™ 
flash memory component and Se- 
ries 2 flash memory card lines combine the high density 
and high performance required for resident "font" stor- 
age. For further information on these products, refer- 
ence the Additional Information section at the conclu- 
sion of this application brief. 


The temporary graphic memory subsystem stores the 
image to be printed as it is "constructed" by the proces- 
sor from data provided by the host computer. Optimum 
characteristics of this memory include full "real-time" 
bit-level alteration, infinite rewrite capability and fast 
read/write 
performance. Nonvolatility is not required 


in this area of the memory 
subsystem. Therefore, 
DRAM will continue to be the memory of choice for 
temporary image storage. 


This application brief has discussed the various memo- 
ry subsystems in today's laser printers, and their oper- 
ating characteristics. Flash memory is an exciting new 
approach that offers the very real potential to signifi- 
cantly improve your next-generation laser printer de- 
signs. Its capabilities are superior to traditional solu- 
tions in the system code and font memory areas, and 
enable laser printers that are more expandable, more 
flexible, higher performance and easier to use than ever 
before. The end result is a satisfied customer, a custom- 
er that will choose your product over a competitor's, 
and a customer that will remain loyal to your company 
far into the future. 


For additional information on the Intel flash memory products mentioned in this article, please reference the 
following documents, available through your local Intel sales representative. 


Boot Block Components 
28F001 BX Datasheet 
28F200BX/28F002BX 
Datasheet 


28F400BX/28F004BX 
Datasheet 
. 


ER-26 
"The 
Intel 28F001 BX-T and 28F001 BX-B Flash Memories" 
ER-29 
"The 
Intel 2/4 Mbit Boot Block Flash Memory Family" 


Order Number 
290406 
290448 
290451 
294010 
294013 


FlashFlle 
Components 
28F008SA 
Datasheet 
AP-359 
"28F008SA 
Hardware 
Interfacing" 
AP-360 
"28F008SA 
Software 
Drivers" 


AP-364 
"28F008SA 
Automation 
and Algorithms" 


ER-27 
"The 
Intel 28F008SA 
Flash Memory" 


Order Number 
290429 
292094 
292095 
292099 
294011 


FlashFile 
Series 2 Cards 
Series 2 Flash Memory Card Datasheet 
AP-361 
"Implementing 
the Integrated 
Registers 
of the Series 2 Flash Memory Card" 


General 
Flash Information 
AP-357 
"Power 
Supply Solutions 
for Flash Memory" 


ER-20 
"ETOX 
II Flash Memory Technology" 
ER-28 
"ETOX 
III Flash Memory Technology" 


Order Number 
290434 
292096 


Order Number 
292092 
294005 
294012 


'Microsoft 
and TrueType are trademarks of Microsoft Corporation. Adobe Type Manager and PostScript are 
trademarks of Adobe Systems Incorporated. PCL is a trademark of Hewlett Packard Corporation. ETOX and 
FlashFile are trademarks of Intel Corporation. 
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DD28F032SA 
32-MBIT (2 MBIT x 16, 4 MBIT x 8) 
FLASHFILE™ MEMORY 


• 
User-Selectable 
3.3V or 5V Vee 


• 
User-Configurable 
x8 or x16 Operation 


• 
70 ns Maximum 
Access 
Time 


• 
0.43 MB/sec 
Write Transfer 
Rate 


• 
1 Million Erase Cycles per Block 


• 
56-Lead, 
1.2 x 14 x 20mm Dual Die 
Advanced 
TSOP Package 
Technology 


• 
Revolutionary 
Architecture 
-100% 
Backwards 
Compatible 
with 
Intel 
28F016SA 
- 
Pipelined 
Command 
Execution 


- 
Write during Erase 


• 
2 mA Typical 
Ice in Static Mode 


• 
2 p.A Typical 
Deep Power-Down 


• 
64 Independently 
Lockable 
Blocks 


• 
State-of-the-Art 
0.6 p'm ETOX IV Flash 
Technology 


Intel's 
DD28F032SA 
32-Mbit 
FlashFile™ 
Memory 
is a revolutionary 
architecture 
which enables 
the design of 


truly mobile, high performance, 
personal 
computing 
and communication 
products. 
With innovative 
capabilities, 


low power 
operation 
and very 
high read/write 
performance, 
the DD28F032SA 
is also the ideal 
choice 
for 


designing 
embedded 
mass storage 
flash memory 
systems. 


The DD28F032SA 
is the result of highly advanced 
packaging 
innovation 
which 
encapsulates 
two 28F016SA 
die in a single Dual Die Thin Small Outline 
Package 
(DDTSOP). 


The DD28F032SA 
is the highest 
density, 
highest 
performance 
non-volatile 
read/write 
solution 
for solid-state 


storage 
applications. 
Its symmetrically 
blocked 
architecture 
(100% 
compatible 
with the 28F016SA 
16-Mbit 


FlashFile 
memory), 
very high cycling, 
low power 
3.3V operation, 
very fast write 
and read performance 
and 
selective 
block 
locking 
provide 
a highly flexible 
memory 
component 
suitable 
for high density 
memory 
cards, 


Resident 
Flash 
Arrays 
and PCMCIA-AT A Flash 
Drives. 
The DD28F032SA's 
dual read voltage 
enables 
the 
design 
of memory 
cards 
which 
can interchangeably 
be read/written 
in 3.3V and 5.0V systems. 
Its x8/x16 
architecture 
allows 
the optimization 
of memory 
to processor 
interface. 
The flexible 
block 
locking 
option 
en- 
ables 
bundling 
of 
executable 
application 
software 
in 
a 
Resident 
Flash 
Array 
or 
memory 
card. 
The 
DD28F032SA 
will be manufactured 
on Intel's 
0.6 ,...m ETOX IV technology. 
• 


The DD28F032SA is a high performance 32-Mbit 
(33,554,432-bit) block erasable non-volatile random 
access memory organized as either 2 Mword x 16 or 
4 Mbyte x 8. The DD28F032SA is built using two 
28F016SA chips encapsulated in a single 56L-TSOP 
type I package. The DD28F032SA includes sixty- 
four 64-KB (65,536) blocks or sixty-four 32-KW 
(32,768) blocks. 


The implementation of a new architecture, with 
many enhanced features, will improve the device op- 
erating characteristics and results in greater product 
reliability and ease of use. 


Among 
the 
significant 
enhancements 
on 
the 


DD28F032SA: 


• 3.3V Low Power Capability 
• Improved Write Performance 
• Dedicated Block Write/Erase Protection 


A 3/5# 
input pin reconfigures the device internally 
for optimized 3.3V or 5.0V read/write operation. 


The DD28F032SA will be available in a 56-lead, 
1.2mm thick, 14mm x 20mm Dual Die TSOP type 1 
package. This form factor and pinout allow for very 
high board layout ,densities. The DD28F032SA is 
pinout and footprint compatible with the 28F016SA. 


A Command User Interface (CUI) serves as the sys- 
tem interface between the microprocessor or micro- 
controller and the internal memory operation. 


Internal Algorithm Automation allows Word/Byte 
Writes and Block Erase operations to be executed 
using a Two-Write command sequence to the CUI in 
the same way as the 28F016SA 16-Mbit FlashFile 
memory. 


A Superset of commands have been added to the 
basic 28F008SA (8-Mbit flashfile memory) com- 
mand-set to achieve higher write performance and 
provide additional capabilities. These new com- 
mands and features include: 


• 
Page Buffer 
Writes 
to Flash 


• 
Command 
Queueing 
Capability 


• 
Automatic 
Data Writes 
during 
Erase 


• 
Software 
Locking 
of Memory 
Blocks 


• 
TWO-Byte 
Successive 
Writes 
in 8-bit Systems 


• 
Erase All Unlocked 
Blocks 


Writing of memory data is performed in either byte or 
word increments typically within 6 ,...S, a 33% im- 
provement over the 28F008SA. A Block Erase oper- 
ation erases one of the 64 blocks in typically 0.6 sec, 
independent of the other blocks, which is a 65% 
improvement over the 28F008SA. 


Each block can be written and erasecla minimum of 
100,000 cycles. Systems can achieve 1 million Block 
Erase Cycles by providing wear-Ieve ing algorithms 
and graceful block retirement. These techniques 
have already been employed in many flash file sys- 
tems and in Hard Disk Drive designs. 


The DD28F032SA incorporates four Page Buffers of 
256 Bytes (128 Words) each to allow page data 
writes. This feature can improve a sy!ltem write per- 
formance by up to 4.8 times over previous flash 
memory devices. 


All operations are started by a sequ1snceof Write 
commands to the device. Three S~ttus Registers 
(described in detail later) and a RY/BY # output pin 
provide information on the progress of the requested 
operation. 


The DD28F032SA allows queueing of the next oper- 
ation while the memory executes the ::urrent opera- 
tion. This eliminates system overheacl when writing 
several bytes in a row to the array or erasing several 
blocks at the same time. The DD28F0:32SAcan also 
perform write operations to one block of memory 
while performing erase of another block. However, 
simultaneous write and/or erase operations are not 
allowed on both 28F016SA devices. See modes of 
operation in Section 3.0. 


The DD28F032SA provides user-sel':lctable block 
locking to protect code or data such a::;Device Driv- 
ers, PCMCIA card information, 
ROIIII-Executable 


O/S or Application code. Each block has an associ- 
ated non-volatile lock-bit which detern ines the lock 
status of the block. In addition, the )D28F032SA 
has a master Write Protect pin (WP~I')which pre- 
vents any modifications to memory blocks whose 
lock-bits are set. 


The DD28F032SA contains three types of Status 
Registers to accomplish various functions: 
• A Compatible Status Register (CSR) which is 


100% compatible with the 28F008SA FlashFile 
memory's Status Register. This rEtgister,when 
used alone, provides a straightforward upgrade 
capability to the DD28F032SA from a 28F008SA- 
based design. 


• A Global Status Register (GSR) which informs 


the system of command Queue !,tatus, Page 
Buffer status, and overall Write SIate Machine 
(WSM) status. 


• 64 Block Status Registers (BSRs) \l1'hichprovide 


block-specific status information !iuch as the 
block lock-bit status. 


The 
DD28F032SA incorporates 
an 
open 
drain 


RY/BY # output pin. This feature allows the user to 
OR-tie many RY/BY # pins together 
n a multiple 


memory configuration such as a Residl:mt Flash Ar- 
ray. 
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Other 
configurations 
of the 
RY /BY # 
pin are 
en- 
abled via special 
CUI commands. 


Consult 
the 28F016SA 
user's 
manual 
for more de- 
tail. 


the active current 
when the device 
is in static 
mode 


of operation 
(addresses 
not switching). 


The DD28F032SA 
incorporates 
three chip enable in- 
put pins: 
CEo #, 
CE 1# 
and CE2 #. 
The 
active 
low 
combination 
of CEo# 
and CE1 # controls 
the lower 
28F016SA. 
The 
active 
low 
combination 
of 
CEo# 
and CE2# 
controls 
the upper 28F016SA. 


A Deep Power-Down 
mode of operation 
is invoked 


when the RP# 
(called 
PWD on the 28F008SA) 
pin 


transitions 
low. This mode 
provides 
additional 
write 


protection 
by acting 
as a device 
reset 
pin during 


power 
transitions. 
In the 
Deep 
Power-Down 
state, 


the WSM 
is reset 
(any current 
operation 
will abort) 


and the CSR, GSR and BSR registers 
are cleared. 


A 
CMOS 
Standby 
mode 
of 
operation 
is enabled 


when 
either 
CEo# 
or both 
CE1 # 
and CE2# 
tran- 


sition high and RP# 
stays high with all input control 


pins at CMOS 
levels. 


The BYTE # pin allows 
either x8 or x16 read/writes 
to the 
DD28F032SA. 
BYTE # 
at logic 
low selects 
8-bit 
mode 
with address 
Ao selecting 
between 
low 
byte and high byte. On the other 
hand, 
BYTE # 
at 
logic high enables 
16-bit operation 
with address 
A1 
becoming 
the lowest 
order address 
and address 
Ao 
is not used (don't 
care). 


The DD28F032SA 
56L-Dual 
Die TSOP Type I pinout 


configuration 
is shown 
in Figure 
1. 
The DD28F032SA 
incorporates 
an Automatic 
Power 
Saving 
(APS) 
feature 
which 
substantially 
reduces 


Symbol 
Type 
Name and Function 


Ao 
INPUT 
BYTE·SELECT 
ADDRESS: 
Selects 
between 
high and low byte when 
device is in x8 mode. This address 
is latched 
in x8 Data Writes. Not used 


in x16 mode (Le., the Ao input buffer is turned off when BYTE # is high). 


A1-A15 
INPUT 
WORD·SELECT 
ADDRESSES: 
Select a word within one 64-KByte 
block. 


Ae-A15 
selects 
1 of 1024 rows, and A1-A5 
selects 
16 of 512 columns. 
These addresses 
are latched during Data Writes. 


A1e-A2o 
INPUT 
BLOCK-SELECT 
ADDRESSES: 
Select 
1 of 32 Erase blocks. These 


addresses 
are latched during Data Writes, Erase and Lock-Block 


operations. 


DOO-D07 
INPUT/OUTPUT 
LOW-BYTE 
DATA BUS: Inputs data and commands 
during CUI write 
cycles. Outputs 
array, buffer, identifier 
or status data in the appropriate 
Read mode. Floated when the chip is de-selected 
or the outputs 
are 


disabled. 


D08-D015 
INPUT /OUTPUT 
HIGH-BYTE 
DATA BUS: Inputs data during x16 Data-Write 
operations. 


Outputs 
array, buffer or identifier 
data in the appropriate 
Read mode; not 


used for Status register reads. Floated when the chip is de-selected 
or the 
outputs 
are disabled. 


CEo#, 
INPUT 
CHIP ENABLE 
INPUTS: Activate 
the device's 
control 
logic, input buffers, 


CE1#, 
decoders 
and sense amplifiers. 
CEo # , CE 1# disable/enable 
Lower 


CE2# 
28F016SAwhile 
CEo#, 
CE2# 
disable/enable 
Upper 28F016SA. 
CEo# 


active low enables 
chip operation 
while CE1 # or CE2# 
select between 
the lower and upper 2 MBytes. CE1 # and CE2# 
must not be active low 
simultaneously. 


RP# 
INPUT 
RESET/POWER·DOWN: 
RP# 
low places the device in a Deep Power- 
Down state. All circuits that burn static power, even those circuits enabled 
in standby 
mode, are turned off. When returning 
from Deep Power-Down, 


a recovery 
time is required to allow these circuits to power-up. 


When RP# 
goes low, any current or pending WSM operation(s) 
are 


terminated, 
and the device is reset. All Status registers 
return to ready 


(with all status flags cleared). 


nn.~JlI::n'll ,:;~ V 
I 
VU I •.•U I ~NAtsLE: Gates device data through 
the output buffer!> when low. 


The outputs float to tri-state 
off when OE # is high. 
NOTE: CEx# 
overridesOE#, 
and OE# 
overrides 
WE#. 


WE# 
INPUT 
WRITE 
ENABLE: 
Controls 
access to the CUI, Page Buffers, 
Datil Oueue 
Registers 
and Address 
Oueue Latches. WE # is active low, and hitches 
both 
address and data (command 
or array) on its rising edge. 


RY/BY# 
OPEN DRAIN 
READY/BUSY: 
Indicates 
status of the internal WSM. When low, it indicates 
that 
OUTPUT 
the WSM is busy performing 
an operation. 
RY /BY # high indicatEls that the 
WSM is ready for new operations 
(or WSM has completed 
all per ding 
operations), 
or Erase is Suspended, 
or the device is in Deep Power-Down 
mode. This output is always active (Le., not floated 
to tri-state 
off when OE # or 


CEo #, CE1 # are high), except 
if a RY /BY # Pin Disable command 
is issued. 


WP# 
INPUT 
WRITE 
PROTECT: 
Erase blocks can be locked by writing a non-',folatile 
lock-bit 


for each block. When WP# 
is low, those locked blocks as reflect'oK! by the 
Block-Lock 
Status bits (BSR.6), are protected 
from Data Writes or Erases. 


When WP # is high, all blocks can be Written or Erased regardless 
of the state 


of the lock-bits. 
The WP # input buffer is disabled 
when RP # transitions 
low 


(Deep Power-Down 
mode). 


BYTE # 
INPUT 
BYTE ENABLE: 
BYTE # low places device in x8 mode. All data i~:then input or 


output on 000-007, 
and 008-0015 
float. Address 
Ao selects 
b(~tween the 
high and low byte. BYTE # high places the device in x16 mode, and turns off the 
Ao input buffer. Address 
A1' then becomes 
the lowest order addrElss. 


3/5# 
INPUT 
3.3Y /5.0Y 
SELECT: 
3/5 # high configures 
internal circuits for 3.31/ operation. 


3/5# 
low configures 
internal circuits for 5.QV operation. 
NOTES: 
Reading the array with 3/5# 
high in a 5.QV system could damage 
the 


device. 
There is a significant 
delay from 3/5# 
switching 
to access valid data. 


Vpp 
SUPPLY 
ERASE/WRITE 
POWER SUPPLY: 
For erasing memory array blo<:ks or writing 


words/bytes/pages 
into the flash array. 


Vcc 
SUPPLY 
DEYICE 
POWER SUPPLY 
(3.3Y ± O.3Y,5.0Y 
± O.5Y): Do not leilve any 


power pins floating. 


GND 
SUPPLY 
GROUND 
FOR ALL INTERNAL 
CIRCUITRY: 
Do not leave any ground pins 
floating. 


NC 
NO CONNECT: 
No internal connection 
to die, lead may be driven or left floating 


14 mm x 20 mm 


TOP VIEW 


WP- 


WE- 
OE- 


RY ISY- 
00,5 
00, 


00,. 


DOg 


GNO 
00" 
DOs 


00,2 
DO. 
Vee 


GNO 
DO" 
DO, 
00,. 
002 
Vee 
DOg 
00, 
DO. 
000.•. 


SYTE- 
Ne 
Ne 


DD28F032SA 


56 - LEAD TSOP PINOUT 


RP# 
CEo# 
CE1# 
CE2# 
Lower 
Upper 
DD28F032SA 


28F016SA 
28F016SA 
Chip 


0 
X 
X 
X 
DPD 
DPD 
DPD 


1 
1 
X 
X 
Standby 
Standby 
Standby 


1 
0 
0 
1 
Active 
Standby 
Active 


1 
0 
1 
0 
Standby 
Active 
Active 


1 
. 
0 
1 
1 
Standby 
Standby 
Standby 


1 
0 
0 
0 
Illegal Condition 


x = Don't 
Care 
DPD = Deep 
Power-Down 


28F016SA 
16 MBIT (1 MBIT x 16, 2 MBIT x 8) 
FLASHFILE™ MEMORY 


• 
Revolutionary 
Architecture 
- 
Pipelined 
Command 
Exec ution 
- 
Write During Erase 
- 
Command 
Superset 
of II tel 
28F008SA 


• 
1 mA Typical 
Ice in Static Mode 


• 
1 fLA Typical 
Deep Power-D'I)wn 


• 
32 Independently 
Lockable 
1310cks 


• 
State-of-the-Art 
0.6 fLm ETO X IV Flash 
Technology 


Intel's 2BF016SA 
16-Mbit FlashFile™ 
Memory 
is a revolutionary 
architecture 
which enables 
the design of truly 
mobile, 
high performance, 
personal 
computing 
and communication 
products. 
With innovative 
capabilities, 
low 
power 
operation 
and very high read/write 
performance, 
the 2BF016SA 
is also the ideal choice 
for designing 
embedded 
mass storage 
flash memory 
systems. 


• 
User-Selectable 
3.3V or 5V Vee 


• 
User-Configurable 
x8 or x16 Operation 


• 
70 ns Maximum 
Access 
Time 


• 
0.43 MB/sec 
Write Transfer 
Rate 


• 
1 Million Erase Cycles per Block 


• 
56-Lead, 
1.2mm x 14mm x 20mm TSOP 
Package 


The 
2BF016SA 
is a very 
high density, 
highest 
performance 
non-volatile 
read/write 
solution 
for solid-state 
storage 
applications. 
Its symmetrically 
blocked 
architecture 
(100% 
compatible 
with 
the 
2BFOOBSA B-Mbit 
FlashFile™ 
memory), 
extended 
cycling, 
low power 3.3V operation, 
very fast write and read pertormance 
and 
selective 
block 
locking 
provide 
a highly flexible 
memory 
component 
suitable 
for high density 
memory 
cards, 
Resident 
Flash Arrays and PCMCIA-AT A Flash Drives. The 2BF016SA's 
dual read voltage 
enables 
the design 
of memory 
cards which can interchangeably 
be read/written 
in 3.3V and 5.0V systems. 
Its xB/X'16 architecture 
allows the optimization 
of memory to processor 
interface. 
The flexible 
block locking option enables 
bundling 
of 
executable 
application 
software 
in a Resident 
Flash Array or memory 
card. Manufactured 
on Intel's 
0.6 fJ-m 
ETOXIV 
process 
technology, 
the 2BF016SA 
is the most cost-effective, 
high-density 
3.3V f1ashlile memory. 


28F016SA 
16 Mbit (1 Mbit x 16, 2 Mbit x 8) 
Flashfile ™ 
Memory 
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The documentation of the Intel 28F016SA memory 
device includes this data sheet, a detailed user's 
manual, and a number of application notes, all of 
which are referenced at the end of this data sheet. 


The data sheet is intended to give an overview of 
the chip feature-set and of the operating AC/DC 
specifications. The 28F016SA User's Manual pro- 
vides complete descriptions of the user modes, sys- 
tem interface examples and detailed descriptions of 
all principles of operation. It also contains the full list 
of software algorithm flowcharts, and a brief section 
on compatibility with Intel 28F008SA. 


The 28F016SA is a high performance 
16 Mbit 
(16,777,216 bit) block erasable non-volatile random 
access memory organized as either 1 Mword x 16 or 
2 Mbyte x 8. The 28F016SA includes thirty-two 64 
KB (65,536) blocks or thirty-two 32-KW (32,768) 
blocks. A chip memory map is shown in Figure 3. 


The implementation of a new arChitecture, with 
many enhanced features, will improve the device op- 
erating characteristics and results in greater product 
reliability and ease of use. 


Among 
the 
significant 
enhancements 
on 
the 
28F016SA: 
• 3.3V Low Power Capability 
• Improved Write Performance 
• Dedicated Block Write/Erase Protection 


A 3/5# 
input pin reconfigures the device internally 
for optimized 3.3V or 5.0V read/write operation. 


The 28F016SA will be available in a 56-lead, 1.2mm 
thick, 14mm x 20mm TSOP type 1 package. This 
form factor and pinout allow for very high board lay- 
out densities. 


A Command User Interface (CUI) serves as the sys- 
tem interface between the microprocessor or micro- 
controller and the internal memory operation. 


Internal Algorithm Automation allows Byte/Word 
Writes and Block Erase operations to be executed 
using a Two-Write command sequence to the CUI in 
the same way as the 28F008SA 8-Mbit FlashFile™ 
memory. 


A Superset of commands have been added to the 
basic 28F008SA command-set to achieve higher 
write performance and provide additional capabili- 
ties. These new commands and fE~aturesinclude: 


• Page Buffer Writes to Flash 
• Command Queuing Capability 
• Automatic Data Writes During Erase 
• Software Locking of Memory Blocks 
• Two-Byte Successive Writes in 8-bit Systems 
• Erase All Unlocked Blocks 


Writing of memory data is performed in either byte or 
word increments typically within 6 ,u.sec,a 33% im- 
provement over the 28F008SA. A Block Erase oper- 
ation erases one of the 32 blocks ir typically 0.6 sec, 
independent of the other blocks, which is about 65% 
improvement over the 28F008SA. 


Each block can be written and erasad a minimum of 
100,000 cycles. Systems can achieve 1 million Block 
Erase Cycles by providing wear-leveling algorithms 
and graceful block retirement. These techniques 
have already been employed in many flash file sys- 
tems and Hard Disk Drive designs. 


The 28F016SA incorporates two I'age Buffers of 
256 Bytes (128 Words) each to allow page data 
writes. This feature can improve a s:ystemwrite per- 
formance by up to 4.8 times over previous flash 
memory devices. 


All operations are started by a sequence of Write 
commands to the device. Three Status Registers 
(described in detail later) and a RYlBY# 
output pin 
provide information on the progress .;)fthe requested 
operation. 


While the 28F008SA requires an operation to com- 
plete before the next operation can be requested, 
the 28F016SA allows queuing of thE!next operation 
while the memory executes the current operation. 
This eliminates system overhead when writing sev- 
eral bytes in a row to the array or erasing several 
blocks at the same time. The 28F016SA can also 
perform write operations to one block of memory 
while performing erase of another block. 


The 28F016SA provides user-selectllible block lock- 
ing to protect code or data such as Device Drivers, 
PCMCIA card information, ROM-Executable O/S or 
Application Code. Each block has an associated 
non-volatile 
lock-bit 
which 
determines 
the 
lock 
status of the block. In addition, the 2l'1F016SAhas a 
master Write Protect pin (WP#) whic 
prevents any 
modifications to memory blocks wholi:e lock-bits are 
set. 


The 28F016SA contains three types of Status Reg- 
isters to accomplish various functions: 
• A Compatible Status Register (CSR) which is 


100% compatible with the 28F008SA FlashFile 
memory's Status Register. This register, when 
used alone, provides a straightforward upgrade 
capability to the 28F016SA from a 28F008SA- 
based design. 


• A Global Status Register (GSR) which informs 


the system of command Queue status, Page 
Buffer status, and overall Write State Machine 
(WSM) status. 


• 32 Block Status Registers (BSRs) which provide 


block-specific 
status information such as the 


block lock-bit status. 


The GSR and BSR memory maps for Byte-Wide and 
Word-Wide modes are shown in Figures 4.1 and 4.2. 


The 28F016SA incorporates an open drain RYIBY # 
output pin. This feature allows the user to OR-tie 
many RYIBY # pins together in a multiple memory 
configuration such as a Resident Flash Array. 


Other configurations of the RYIBY # pin are en- 
abled via special CUI commands and are described 
in detail in the 28F016SA User's Manual. 


The 28F016SA also incorporates a dual chip-enable 
function with two input pins, CEo# 
and CE1#. 
These pins have exactly the same functionality as 
the regular chip-enable pin CE# on the 28F008SA. 
For minimum chip designs, CE1# may be tied to 
ground and use CEo# as the chip enable input. The 
28F016SA uses the logical combination of these two 
signals to enable or disable the entire chip. Both 
CEo# and CE1# must be active low to enable the 
device and if either one becomes inactive, the chip 
will be disabled. This feature, along with the open 
drain RYIBY # pin, allows the system designer to 
reduce the number of control pins used in a large 
array of 16-Mbit devices. 


The BYTE# pin allows either x8 or x16 readlwrites 
to the 28F016SA. BYTE# at logic low selects 8-bit 
mode with address Ao selecting between low byte 


and high byte. On the other hand, BYTE# at logic 
high enables 16-bit operation with address A1 be- 
coming the lowest order address and address Ao is 
not used (don't care). A device block diagram is 
shown in Figure 1. 


The 28F016SA is specified for a maximum access 
time of 70 ns (tAccl at 5.0V operation (4.75V to 
5.25V) over the commercial temperature range (O°C 
to + 70°C). A corresponding maximum access time 
of 120 ns at 3.3V (3.0V to 3.6V and O°Cto + 70°C) is 
achieved for reduced power consumption applica- 
tions. 


The 28F016SA incorporates an Automatic Power 
Saving (APS) feature which substantially reduces 
the active current when the device is in static mode 
of operation (addresses not switching). 


In APS mode, the typical Icc current is 1 mA at 5.0V 
(0.8 mA at 3.3V). 


A Deep Power-Down mode of operation is invoked 
when the RP# (called PWD on the 28F008SA) pin 
transitions low. This mode brings the device power 
consumption to less than 1.0 /LA,typically, and pro- 
vides additional write protection by acting as a de- 
vice reset pin during power transitions. A reset time 
of 400 ns is required from RP# switching high until 
outputs are again valid. In the Deep Power-Down 
state, the WSM is reset (any current operation will 
abort) and the CSR, GSR and BSR registers are 
cleared. 


A CMOS Standby mode of operation is enabled 
when either CEo# or CE1# transitions high and 
RP# stays high with all input control pins at CMOS 
levels. In this mode, the device typically draws an 
Icc standby current of 50 /LA. 


The 28F016SA 56L-TSOP Type I pinout configura- 
tion is shown in Figure 2. 
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FIgure 1. 28F016SA Block Diagram 


Architectural 
Evolution Includes Page Buffers, Queue RegIsters and Extended Status RegIsters. 
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Symbol 
Type 
Name and Function 


A() 
INPUT 
BYTE-SELECT 
ADDRESS: 
Selects 
between 
high and low byte when 


device is in x8 mode. This address is latched 
in x8 Data Writes. Not used 


in x16 mode (Le., the Ao input buffer is turned off when BYTE # is high). 


A1-A15 
INPUT 
WORD-SELECT 
ADDRESSES: 
Select a word within one 64-Kbyte 


block. As-15 selects 
1 of 1024 rows, and A1-5 selects 
16 of 512 


columns. 
These addresses 
are latched during Data Writes. 


A16-A20 
INPUT 
BLOCK·SELECT 
ADDRESSES: 
Select 1 of 32 Erase blocks. These 


addresses 
are latched 
during Data Writes, Erase and Lock-Block 


operations. 


DOo-DO? 
INPUT IOUTPUT 
LOW-BYTE 
DATA 
BUS: Inputs data and commands 
during CUI write 
cycles. Outputs array, buffer, identifier 
or status data in the appropriate 
Read mode. Floated when the chip is de-selected 
or the outputs are 


disabled. 


008-0015 
INPUT IOUTPUT 
HIGH·BYTE 
DATA 
BUS: Inputs data during x16 Data-Write 
operations. 


Outputs array, buffer or identifier 
data in the appropriate 
Read mode; not 


used for Status register reads. Floated when the chip is de-selected 
or 
the outputs are disabled. 


CEo#,CE1# 
INPUT 
CHIP ENABLE 
INPUTS: Activate 
the device's 
control 
logic, input 


buffers, decoders 
and sense amplifiers. 
With either CEo# 
or CE1 # high, 


the device is de-selected 
and power consumption 
reduces to Standby 


levels upon completion 
of any current Data-Write 
or Erase operations. 


Both CEo #, CE 1# must be low to select the device. 
All timing specifications 
are the same for both signals. Device Selection 


occurs with the latter falling edge of CEo # or CE 1#. The first rising edge 
of CEo# 
or CE1 # disables the device. 


RP# 
INPUT 
RESET/POWER·DOWN: 
RP# 
low places the device in a Deep Power- 


Down state. All circuits that burn static power, even those circuits 
enabled 
in standby 
mode, are turned off. When returning from Deep 


Power-Down, 
a recovery 
time of 400 ns is required to allow these circuits 


to power-up. 
When RP# 
goes low, any current or pending WSM operation(s) 
are 


terminated, 
and the device is reset. All Status registers 
return to ready 
(with all status flags cleared). 


OE# 
INPUT 
OUTPUT 
ENABLE: 
Gates device data through the output buffers when 
low. The outputs float to tri-state 
off when OE # is high. 
NOTE: 
CEx # overrides 
OE #, and OE # overrides 
WE # . 


WE# 
INPUT 
WRITE 
ENABLE: 
Controls 
access to the CUI, Page Buffers, 
Data Oueue 


Registers 
and Address 
Oueue Latches. WE # is active low, and latches 


both address and data (command 
or array) on its rising edge. 


RY/BY# 
OPEN DRAIN 
READY IBUSY: 
Indicates 
status of the internal WSM. When low, it 


OUTPUT 
indicates 
that the WSM is busy performing 
an operation. 
RY IBY # high 
indicates 
that the WSM is ready for new operations 
(or WSM has 


completed 
all pending operations), 
or Erase is Suspended, 
or the device 


is in deep power-down 
mode. This output is always active (Le., not 


floated to tri-state 
off when OE # or CEo#, 
CE1 # are high), except if a 


RY IBY # Pin Disable command 
is issued. 


• 


Symbol 
Type 
Name and Function 


WP# 
INPUT 
WRITE 
PROTECT: 
Erase blocks can be locked by writing a non-volatile 
ock-bit for 


each block. When WP# 
is low, those locked blocks as reflected 
by the Ellock-Lock 


Status bits (BSR.6), are protected 
from inadvertent 
Data Writes or Erase:,. When 


WP # is high, all blocks can be Written or Erased regardless 
of the state I)f the lock- 


bits. The WP# 
input buffer is disabled 
when RP# 
transitions 
low (deep power-down 


mode). 


BYTE # 
INPUT 
BYTE ENABLE: 
BYTE # low places device in x8 mode. All data is then input or output 


on 000-7, and 008-15 float. Address 
AO selects between 
the high and lOINbyte. 


BYTE # high places the device in x16 mode, and turns off the Ao input buffer. Address 
A1' then becomes 
the lowest order address. 


3/5# 
INPUT 
3.3/5.0 
VOLT SELECT: 
3/5# 
high configures 
internal circuits for 3.3V operation. 


3/5# 
low configures 
internal circuits for 5.0V operation. 


NOTES: 
Reading the array with 3/5# 
high in a 5.0V system could damage the del/ice. 


There is a significant 
delay from 3/5# 
switching 
to valid data. 


Vpp 
SUPPLY 
ERASE/WRITE 
POWER SUPPLY: 
For erasing memory array blocks or writing words/ 


bytes/pages 
into the flash array. 


Vcc 
SUPPLY 
DEVICE 
POWER SUPPLY 
(3.3V ± 0.3V,5.0V 
± 0.5V): 
Do not leave any power pins floating. 


GNO 
SUPPLY 
GROUND 
FOR ALL INTERNAL 
CIRCUITRY: 
Do not leave any ground pins floating. 
, 


NC 
NO CONNECT: 
No internal connection 
to die, lead may be driven or left floating. 


E28F016SA 
56-LEAD 
TSOP PINOUT 
14mm 
X 20mm 
TOP VIEW 


o 


NOTE: 
56-LEAD 
TSOP 
Mechanical 
Diagrams 
and Dimensions 
are shown 
at the end of this specification 
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3.1 
Extended 
Status Registers 
Memory Map 


X8 MODE 
A[20:0] 
X16 MODE 


1F0006H 


1F0005H 


1F0004H 


1F0003H 


1F0002H 


1F0001H 


1FOOOOH 


RESERVED 


GSR 


RESERVED 


BSR31 


RESERVED 


RESERVED 


RESERVED 


RESERVED 
GSR 


RESERVED 


BSRO 
RESERVED 
RESERVED 


FIgure 4.1 Extended 
Status Register 
Memory 
Map (Byte-wIde 
mode) 


000006H 


000005H 


000004H 


000003H 


000002H 


000001H 
OOOOOOH 


..- 


RESERVED 


RESERVED 
..- 
GSR 


RESERVED 
BSRO 


RESERVED 
RESERVED 


FIgure 4.2Extended 
Status Rl~glster 
Memory 
Map (Word-wide 
m1ode) 


Mode 
Notes 
RP# 
CE1# 
CEoI' 
OE# 
WE# 
A1 
OQ0-15 
RY/BY# 


Read 
1,2,7 
VIH 
VIL 
VIL 
VIL 
VIH 
X 
DOUT 
X 


Output Disable 
1,6,7 
VIH 
VIL 
VIL 
VIH 
VIH 
X 
HighZ 
X 


Standby 
1,6,7 
VIH 
VIL 
VIH 
X 
X 
X 
HighZ 
X 


VIH 
VIL 
VIH 
VIH 


Deep Power-Down 
1,3 
VIL 
X 
X 
X 
X 
X 
HighZ 
VOH 


Manufacturer 
ID 
4 
VIH 
VIL 
VIL 
VIL 
VIH 
VIL 
0089H 
VOH 


Device ID 
4 
VIH 
VIL 
VIL 
VIL 
VIH 
VIH 
66AOH 
VOH 


Write 
1,5,6 
VIH 
VIL 
VIL 
VIH 
VIL 
X 
DIN 
X 


Mode 
Notes 
RP# 
CE1# 
CEoI' 
OE# 
WE# 
Ao 
OQ0-7 
RY/BY# 


Read 
1,2,7 
VIH 
VIL 
VIL 
VIL 
VIH 
X 
DOUT 
X 


Output Disable 
1,6,7 
VIH 
VIL 
VIL 
VIH 
VIH 
X 
HighZ 
X 


Standby 
1,6,7 
VIH 
VIL 
VIH 
X 
X 
X 
HighZ 
X 


VIH 
VIL 
VIH 
VIH 


Deep Power-Down 
1,3 
VIL 
X 
X 
X 
X 
X 
HighZ 
VOH 


Manufacturer 
ID 
4 
VIH 
VIL 
VIL 
VIL 
VIH 
VIL 
89H 
VOH 


Device ID 
4 
VIH 
VIL 
VIL 
VIL 
VIH 
VIH 
AOH 
VOH 


Write 
1,5,6 
VIH 
VIL 
VIL 
VIH 
VIL 
X 
DIN 
X 


NOTES: 
1. X can be VIH or VIL for address 
or control 
pins except 
for RY IBY #, which 
is either 
VOL or VOH' 
2. RY/BY# 
output 
is open 
drain. When 
the WSM is ready, 
Erase is suspended 
or the device 
is in deep 
power-down 
mode, 
RY/BY# 
will be at VOH if it is tied to Vcc 
through 
a resistor. 
When 
the RY/BY# 
at VOH is independent 
of OE# 
while 
a 
WSM operation 
is in progress. 


3. RP# 
at GND ± O.2V ensures 
the lowest 
deep power-down 
current. 


4. A{) and At 
at VIL provide 
manufacturer 
ID codes 
in x8 and x16 modes 
repectively. 
A{) and At at VIH provide 
device 
ID codes 
in x8 and x16 modes 
repectively. 
All other 
addresses 
are set to zero. 


5. Commands 
for different 
Erase operations. 
Data Write operations 
or Lock-Block 
operations 
can only be successfully 
com- 
pleted 
when 
Vpp = VPPH. 
6. While the WSM is running, 
RY/BY# 
in Level-Mode 
(default) 
stays at VOL until all operations 
are complete. 
RY/BY# 
goes 
to VOH when the WSM is not busy or in erase 
suspend 
mode. 
7. RY/BY# 
may be at VOL while the WSM is busy performing 
various 
operations. 
For example, 
a status 
register 
read dUring 
a write operation. 
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Command 
Notes 
First Bus Cycle 
Second 
Elus Cycle 


Oper 
Addr 
Data 
Oper 
Addr 
Data 


Read Array 
Write 
X 
FFH 
Read 
Ai". 
AD 


intelligent 
identifier 
1 
Write 
X 
90H 
Read 
l,l, 
ID 


Read Compatible 
Status Register 
2 
Write 
X 
70H 
Read 
X 
CSRD 


Clear Status Register 
3 
Write 
X 
SOH 


Word/Byte 
Write 
Write 
X 
40H 
Write 
Wi\. 
WD 


Alternate 
Word/Byte 
Write 
Write 
X 
10H 
Write 
Wi\. 
WD 


Block Erase/Confirm 
Write 
X 
20H 
Write 
BA 
DOH 


Erase Suspend/Resume 
Write 
X 
BOH 
Write 
X 
DOH 


ADDRESS 
AA = Array Address 
BA = Block Address 
IA = Identifier 
Address 
WA = Write Address 
X = Don't 
Care 


DATA 
AD = Array 
Data 
CSRD = CSR Data 
10 = Identifier 
Data 
WD = Write 
Data 


NOTES: 
1. Following 
the intelligent 
identifier 
command, 
two Read operations 
access 
the manufacturer 
and device 
s gnature 
codes. 


2. The CSR is automatically 
available 
after device 
enters 
Data Write, 
Erase, or Suspend 
operations. 


3. Clears 
CSR.3, 
CSR.4 
and CSR.5. 
Also clears 
GSR.5 
and all BSR.5 and BSR.2 bits. 


See Status 
register 
definitions. 
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Command 
Mode 
Notes 
First Bus Cycle 
Second 
Bus Cycle 
Third Bus Cycle 


Oper 
Addr 
Data 
Oper 
Addr 
Data 
Oper 
Addr 
Data 


Read Extended 
1 
Write 
X 
71H 
Read 
RA 
GSRD 
Status Register 
BSRD 


Page Buffer Swap 
7 
Write 
X 
72H 


Read Page Buffer 
Write 
X 
75H 
Read 
PA 
PD 


Single Load to 
Write 
X 
74H 
Write 
PA 
PD 


Page Buffer 


Sequential 
Load to 
xa 
4,6,10 
Write 
X 
EOH 
Write 
X 
BCL 
Write 
X 
BCH 
Page Buffer 
x16 
4,5,6,10 
Write 
X 
EOH 
Write 
X 
WCL 
Write 
X 
WCH 


Page Buffer Write 
xa 
3,4,9,10 
Write 
X 
OCH 
Write 
~ 
BC(L,H) 
Write 
WA 
BC(H,L) 
to Flash 
x16 
4,5,10 
Write 
X 
OCH 
Write 
X 
WCL 
Write 
WA 
WCH 


Two-Byte 
Write 
xa 
3 
Write 
X 
FBH 
Write 
Ao 
WD(L,H) 
Write 
WA 
WD(H,L) 


Lock Block/Confirm 
Write 
X 
77H 
Write 
BA 
DOH 


Upload Status 
2 
Write 
X 
97H 
Write 
X 
DOH 


Bits/Confirm 


Upload Device 
Write 
X 
99H 
Write 
X 
DOH 


Information 


Erase All Unlocked 
Write 
X 
A7H 
Write 
X 
DOH 


Blocks/Confirm 


RY /BY #' Enable to 
a 
Write 
X 
96H 
Write 
X 
01H 


Level-Mode 


RY /BY #' Pulse-Dn- 
a 
Write 
X 
96H 
Write 
X 
02H 


Write 


RY/BY#' 
Pulse-Dn- 
a 
Write 
X 
96H 
Write 
X 
03H 


Erase 


RY /BY #' Disable 
a 
Write 
X 
96H 
Write 
X 
04H 


Sleep 
Write 
X 
FOH 


Abort 
Write 
X 
aOH 


ADDRESS 
BA = Block Address 
PA = Page Buffer 
Address 


RA = Extended 
Register 
Address 


WA = Write Address 
X = Don't 
Care 


DATA 
AD = Array 
Data 
PO = Page Buffer 
Data 
BSRD = BSR Data 
GSRD = GSR Data 


WC (L,H) = Word 
Count 
(Low, High) 


BC (L,H) = Byte Count 
(Low, High) 


WD (L,H) = Write 
Data (Low, High) 
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NOTES: 
1. RA can be the GSR address or any BSR address. See Figures 4.1 and 4.2 for Extended Status Register Memory Maps. 
2. Upon device power-up, all BSR lock-bits come up locked. The Upload Status Bits command must be written to reflect the 
actual lock-bit status. 
3. Ao is automatically complemented to load second byte of data. BYTE# must be at VIL' 
Ao value determines which WD/BC 
is supplied first: Ao = 0 looks at the WDlIBCl, 
Ao = 1 looks at the W:JH/BCH. 


4. BCH/WCH must be at OOHfor this product because of the 256-Byte (128 Word) Page Buffer size and to llvoid writing the 
Page Buffer contents into more than one 256-Byte segment within an array block. They are simply·shown for future Page 
Buffer expandability. 
5. In x16 mode, only the lower byte 000.7 is used for WCl and WCH. The upper byte 008.15 is a don't carl). 
6. PA and PO (whose count is given in cycles 2 and 3) are supplied starting in the 4th cycle which is not shown. 
7. This command allows the user to swap between available Page Buffers (0 or 1). 
8. These commands reconfigure RYIBY # output to one of two pulse-modes or enable and disable the RYI:lY # function. 
9. Write address, WA, is the Destination address in the flash array which must match the Source address in tile Page Buffer. 
Refer to the 28F016SA User's Manual. 
10. BCl = OOHcorresponds to a Byte count of 1. Similarly, WCl = OOHcorresponds to a Word count of 1. 


WSMS 


7 


ESS 


6 
R 
] 
DWS 


4 


VPPS 


3 


CSR.7 = 
WRITE STATE MACHINE 
STATUS 
1 = 
Ready 
0= 
Busy 


CSR.6 = 
ERASE-SUSPEND 
STATUS 
1 = 
Erase Suspended 
o = 
Erase in Progress/Completed 


CSR.5 = 
ERASE STATUS 
1 = 
Error in Block Erasure 
o = Successful 
Block Erase 


CSR.4 = 
DATA-WRITE 
STATUS 
1 = 
Error in Data Write 
o = 
Data Write Successful 


CSR.3 = Vpp STATUS 
1 = Vpp Low Detect, Operation 
Abort 
0= 
VppOK 


NOTES: 
RY /BY IF output or WSMS bit must be checkl,d 
to 
determine 
completion 
of an operation 
(Erase Suspend, 
Erase or Data Write) before the appropriate 
Status bit 
(ESS, ES or DWS) is checked 
for success. 


If DWS and ES are set to "1" 
during an erase attempt, 
an 
improper 
command 
sequence 
was entered. 
Clear the 
CSR and attempt the operation 
again. 


The VPPS bit, unlike an AID 
converter, 
does not provide 
continuous 
indication 
of Vpp level. The WSM interrogates 
Vpp's level only after the Data-Write 
or Erase command 
sequences 
have been entered, 
and informs th e system if 
Vpp has not been switched 
on. VPPS is not gL aranteed 
to 


report accurate 
feedback 
between 
VPPl and V'-'PP:...;H..:... 
__ 
---' 


CSR.2-0 = RESERVED FOR FUTURE ENHANCEMENTS 
These bits are reserved for future use; mask them out when polling the CSR. 
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4.6 
Global Status Register 


WSMS 
I 
OSS 
I 
DOS 


765 


DSS 


4 


PBSS 


o 


PBAS 


2 


PBS 


1 


GSR.7 = WRITE STATE MACHINE 
STATUS 
1 = Ready 
0= 
Busy 


GSR.6 = 
OPERATION 
SUSPEND 
STATUS 
1 = 
Operation 
Suspended 
o = Operation 
in Progress/Completed 


GSR.5 = 
DEVICE OPERATION 
STATUS 
1 = Operation 
Unsuccessful 
o = Operation 
Successful 
or Currently 
Running 


GSR.4 = 
DEVICE SLEEP STATUS 
1 = 
Device in Sleep 
o = 
Device Not in Sleep 


MATRIX 
5/4 
o 0 = 
Operation 
Successful 
or Currently 
Running 
o 1 = Device in Sleep Mode or Pending Sleep 
1 0 = 
Operation 
Unsuccessful 
1 1 = 
Operation 
Unsuccessful 
or Aborted 


GSR.3 = 
QUEUE STATUS 
1 = 
Queue Full 
o = 
Queue Available 


GSR.2 = 
PAGE BUFFER AVAILABLE 
STATUS 
1 = 
One or Two Page Buffers Available 
o = 
No Page Buffer Available 


GSR.1 = 
PAGE BUFFER STATUS 
1 = 
Selected 
Page Buffer Ready 
o = 
Selected 
Page Buffer Busy 


GSR.O = PAGE BUFFER SELECT STATUS 
1 = 
Page Buffer 1 Selected 
o = 
Page Buffer 0 Selected 


NOTES: 


(1) RY/BY/I 
output or WSMS bit must be 
checked 
to determine 
completion 
of an 
operation 
(Block Lock, Suspend, 
any RY /BY /I 
reconfiguration, 
Upload Status Bits, Erase or 
Data Write) before the appropriate 
Status bit 
(OSS or DOS) is checked 
for success. 


If operation 
currently 
running, then GSR. 7 = O. 
If device pending sleep, then GSR.7 = O. 


Operation 
aborted: 
Unsuccessful 
due to Abort 
command. 


Selected 
Page Buffer is currently 
busy with 
WSM operation 


NOTE: 
1. When multiple operations are queued. checking BSR.7 only provides indication of completion for that particular block. 
GSR.7 provides indication when all queued operations are completed. 


• 


BLS 


6 


BOS 


5 


BOAS 


4 


VPPS 


2 


BSR.7 = 
BLOCK STATUS 
1 = Ready 
0= 
Busy 


NOTES: 


[1) RY /BY# 
output or BS bit must be checked 
to 
determine 
completion 
of an operation 
(Block Lock, 


Suspend, 
Erase or Data Write) before the appropriate 
Status bits (BOS, BLS) is checked 
for success. 


BSR.6 = 
BLOCK-LOCK 
STATUS 
1 = 
Block Unlocked 
for Write/Erase 
o = 
Block Locked for Write/Erase 


BSR.5 = 
BLOCK OPERATION 
STATUS 
1 = 
Operation 
Unsuccessful 
o = Operation 
Successful 
or 
Currently 
Running 


BSR.4 = 
BLOCK OPERATION 
ABORT 
STATUS 
1 = 
Operation 
Aborted 
The BOAS bit will not be set until BSR.7 = 1. 
o = Operation 
Not Aborted 


MATRIX 
5/4 
o 0 = 
Operation 
Successful 
or 
Currently 
Running 
o 1 = 
Not a Valid Combination 
1 0 = 
Operation 
Unsuccessful 
1 1 = 
Operation 
Aborted 


BSR.3 = 
QUEUE STATUS 
1 = Queue Full 
o = 
Queue Available 


BSR.2 = 
Vpp STATUS 
1 = 
Vpp Low Detect, Operation 
Abort 
0= 
VppOK 


NOTES: 
BSR.1 -0 
= RESERVED 
FOR FUTURE 
ENHANCEMENTS 
These 
bits are reserved 
for future 
use; mask them out when 
polling 
the BSRs. 
1. When 
mUltiple 
operations 
are queued, 
checking 
BSR. 7 only 
provides 
indication 
of completion 
for that 
Jarticular 
block. 


GSR.7 
prOVides indication 
when 
all queued 
operations 
are completed. 


5.1 
Absolute Maximum Ratings· 


Temperature 
Under Bias 
O·C to + BO·C 


Storage Temperature 
- 65·C to + 125·C 


products in the sampling and initial production phases 
of development. 
The specifications 
are subject 
to 
change 
without 
notice. 
Verify with your local 
Intel 


Sales office that you have the latest data sheet be- 
fore finalizing a design. 


• WARNING: Stressing the device beyond the "Absolute 
Maximum 
Ratings" 
may 
cause permanent 
damage. 
These are stress ratings 
only. Operation 
beyond 
the 
"Operating 
Conditions" 
is not recommended 
and ex- 
tended 
exposure 
beyond 
the 
"Operating 
Conditions" 


may affect device reliability. 


Symbol 
Parameter 
Notes 
Mln 
Max 
Units 
Test Conditions 


TA 
Operating 
Temperature, 
Commercial 
1 
0 
70 
·C 
Ambient 
Temperature 


Vcc 
Vcc with Respect to GND 
2 
-0.2 
7.0 
V 


Vpp 
Vpp Supply Voltage with Respect to GND 
2,3 
-0.2 
14.0 
V 


V 
Voltage 
on any Pin (except Vcc,Vpp) 
2 
-0.5 
Vcc 
V 
with Respect 
to GND 
+0.5 


I 
Current into any Non-Supply 
Pin 
± 30 
mA 


lOUT 
Output Short Circuit Current 
4 
100 
mA 


Symbol 
Parameter 
Notes 
Mln 
Max 
Units 
Test Conditions 


TA 
Operating 
Temperature, 
Commercial 
1 
0 
70 
·C 
Ambient 
Temperature 


Vcc 
Vcc with Respect 
to GND 
2 
-0.2 
7.0 
V 


Vpp 
Vpp Supply Voltage with Respect to GND 
2,3 
-0.2 
14.0 
V 


V 
Voltage 
on any Pin (except VCc,Vpp) 
2 
-2.0 
7.0 
V 
with Respect 
to GND 


I 
Current into any Non-Supply 
Pin 
± 30 
mA 


lOUT 
Output Short Circuit Current 
4 
100 
mA 


NOTES: 
1. Operating temperature is for commercial product defined by this specification. 
2. Minimum DC voltage is -0.5V 
on input/output pins. During transitions, this level may undershoot to -2.0V 
for periods 
<20 ns. Maximum DC voltage on input/output pins is Vcc + 0.5V which. dUringtransitions, may overshoot to Vcc + 2.0V 
for periods < 20 ns. 
3. Maximum DC voltage on Vpp may overshoot to + 14.0V for periods <20ns. 
4. Output shorted for no more than one second. No more than one output shorted at a time. 
5. AC specifications are valid at both voltage ranges. See DC Characteristics tables for voltage range-specific specifications. 
6.5% Vcc specifications refer to the 28F016SA-70 in its High Speed Test configuration. 


Symbol 
Parameter 
Note 
Typ 
Max 
Units 
Test C')ndltlons 


CIN 
Capacitance 
Looking into an 
1 
6 
8 
pF 
TA = 2SoC, f = 1.0 MHz 


Address/Control 
Pin 


GoUT 
Capacitance 
Looking 
into an Output Pin 
1 
8 
12 
pF 
TA = 2SoC, f = 1.0 MHz 


CLOAD 
Load Capacitance 
Driven by Outputs 
1 
SO 
pF 
For Vcc = 3.3V ± 0.3V 


for Timing Specifications 


Equivalent 
Testing 
Load Circuit 
2.S, 
ns 
SO.o.transmission 


line delay 


Symbol 
Parameter 
. 


Note 
Typ 
Max 
Units 
Test CClndltlons 


CIN 
Capacitance 
Looking into an 
1 
6 
8 
pF 
TA = 2SoC, f = 1.0 MHz 


Address/Control 
Pin 


COUT 
Capacitance 
Looking into an Output Pin 
1 
8 
12 
pF 
TA = 2SoC, f = 1.0 MHz 


CLOAD 
Load Capacitance 
Driven by Outputs 
1 
100 
pF 
For Vcc = !i.OV ± O.SV 


for Timing Specifications 
30 
pF 
For Vcc = !i.OV ± 0.2SV 


Equivalent 
Testing 
Load Circuit for 
2.S 
ns 
2S.o.transm ssion 


Vcc ± 10% 
line delay 


Equivalent 
Testing 
Load Circuit for 
2.S 
ns 
83.0. transmission 
Vcc ± SOlo 
line delay 


NOTE: 
1. Sampled. not 100% tested. 


All 3.3V system 
timings 
are measured 
from where 
signals cross 
1.5V. 


For 5.QV systems 
use the standard 
JEDEC cross point definitions. 


Each timing 
parameter 
consists 
of 5 characters. 
Some common 
examples 
are defined 
below: 


teE 
tELQV time(t) 
from CE # (E) going low (L) to the outputs 
(0) becoming 
valid (V) 


toE 
tGLQV time(t) from OE # (G) going low (L) to the outputs 
(0) becoming 
valid M 


tACC 
tAVQV time(t) from address 
(A) valid (V) to the outputs 
(0) becoming 
valid M 


tAS 
tAVWH time(t) 
from address 
(A) valid (V) to WE# 
(W) going high (H) 


tOH 
tWHOX time(t) 
from WE # (W) going high (H) to when the data (D) can become 
undefined 
(X) 


Pin Characters 
Pin States 


A 
Address 
Inputs 
H 
High 


0 
Data Inputs 
L 
Low 
0 
Data Outputs 
V 
Valid 


E 
CE # (Chip Enable) 
X 
Driven, but not necessarily 
valid 


G 
OE # (Output Enable) 
Z 
High Impedance 


W 
WE # (Write Enable) 


P 
RP# 
(Deep Power-Down 
Pin) 


R 
RY IBY # (Ready Busy) 


V 
Any Voltage 
Level 


Y 
3/5# 
Pin 


5V 
Ycc at 4.5V Minimum 


3V 
Vcc at 3.QV Minimum 


;':.4 __ 
IN_P_U_T_.,X::: > T:ST POINTS<: 
0.45 
5 


2.0 
OUTPUT 
0.8 
290489-4 


AC test inputs 
are driven at VOH(2.4 VTTL) for a Logic "1" and VOL(0.45 VTTL) for a Logic "0". Input timing 
begins 


at VIH(2.0 VTTL) and VIL(0.8 VTTL). Output 
timing ends at VIHand VIL.Input rise and fall times (10% to 90%) < 10 


ns. 


Figure 5. Transient 
Input/Output 
Reference 
Waveform 
(Vee = 5.0V) 
for Standard 
Test Conflguratlon(1) 


3.0--I-NP-U-T-""'X>~T(sT 
POINTS---+ 
1.5 
OUTPUT 


0.0 
5 
290489-5 


AC test 
inputs 
are driven 
at 3.0V for a Logic "1" and O.OVfor a Logic "0". 
Input timing 
begins. 
and output 
timing 


ends. at 1.5V. Input rise and fall times (10% to 90%) < 10 ns. 


Figure 6. Transient 
Input/Output 
Reference 
Waveform 
(Vee = 3.3V) 
High Speed Reference 
Waveform(2) 
(Vee = 5.0V ± 5%) 


NOTES: 
1. Testing 
characteristics 
for 28F016SA-080/28F016SA-100. 


2. Testing 
characteristics 
for 28F016SA-070/28F016SA-120/28F016SA-150. 
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Total Capacitance = 100 pF 


Figure 7. Transient Equivalent Testing Load Circuit (Vee = 5.0V) 


.From 
Output 
() r 
Under 
Test 
•••.•.•-------- 


Total Capacitance = 50 pF 


Figure 8. Transient Equivalent Testing Load Circuit (Vee = 3.3V) 


.From 
Output 
() r 
Under 
Test 
_. -------- 


Total Capacitance = 30 pF 


Figure 9. High Speed Transient Equivalent Testing Load Circuit (Vee = 5.0V ± 5%) 
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5.4 
DC Characteristics 
vcc = 3.3V 
± O.3V, TA = ooe to + 700e 
3/5# 
= Pin Set High for 3.3V Operations 


Symbol 
Parameter 
Notes 
Mln 
Typ 
Max 
Units 
Test Conditions 


IlL 
Input Load Current 
1 
±1 
J.LA 
Vcc = Vcc Max, VIN = Vcc or GND 


ILO 
Output Leakage 
1 
±10 
J.LA 
Vcc = Vcc Max, VIN = VCCor GND 
Current 


Iccs 
Vcc Standby Current 
1,5 
50 
100 
J.LA 
Vcc = Vcc Max, 
CEo#,CE1#,RP#, 
= Vcc ± 0.2V 
BYTE#, WP#, 3/5# 
= Vcc ± 
0.2V or GND ± 0.2V 


1 
4 
mA 
Vcc = Vcc Max, 
CEo#, CE1 II, RP# = VIH 
BYTE II , WPII, 3/5# 
= VIH or VIL 


ICCD 
Vcc Deep Power-Down 
1 
1 
5 
J.LA 
RP# = GND ± 0.2V 
Current 


ICCR1 
Vcc Read Current 
1,4,5 
30 
35 
mA 
Vcc = Vcc Max, 
CMOS: CEo#, CE1 II = GND ± 0.2V 
BYTE# = GND ± 0.2Vor Vcc ± 0.2V 
Inputs = GND ± 0.2Vor 
Vcc ± 0.2V, 
TIL: CEo#, CE1# = VIL, 
BYTEII = VIL or VIH 
Inputs = VIL or VIH, 


f = 8 MHz, lOUT = 0 mA 


ICCR2 
Vcc Read Current 
1,4,5 
15 
20 
mA 
Vcc = Vcc Max, 
CMOS: CEolI, CE1 II = 
GND ± 0.2V, BYTE# 
= Vcc 
± 0.2V or GND ± 0.2V 
Inputs = GND ± 0.2Vor 
Vcc ± 0.2V, 
TIL: CEOII , CE111 = VIL 
BYTE II = VIH or VIL 
Inputs = VIL or VIH, 


f = 4 MHz, lOUT = 0 mA 


Iccw 
Vcc Write Current 
1 
8 
12 
mA 
Word/By1e Write in 
Progress 


ICCE 
Vcc Block Erase 
1 
6 
12 
mA 
Block Erase in Progress 
Current 


ICCES 
Vcc Erase Suspend 
1,2 
3 
6 
mA 
CEOII, CE1 II = VIH 
Current 
Block Erase Suspended 


Ipps 
Vpp Standby Current 
1 
±1 
±10 
J.LA 
Vpp ~ Vcc 


IpPD 
Vpp Deep Power-Down 
1 
0.2 
5 
J.LA 
RPII = GND ±0.2V 
Current 
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5.4 
DC Characteristics (Continued) 


Vcc = 3.3V ± 0.3V, TA = O·C to + 70·C 
3/5# 
= Pin Set High for 3.3V Operations 


Symbol 
Parameter 
Notes 
Mln 
Typ 
Max 
Units 
Test Conditions 


IpPR 
Vpp Read,Current 
1 
65 
200 
IJ-A 
Vpp> 
Vcc 


Ippw 
Vpp Write Current 
1 
10 
15 
mA 
Vpp = VPPH, 
Word/Byte 
Write in Progress 


IpPE 
Vpp Erase Current 
1 
4 
10 
mA 
Vpp = VPPH, 
Block Erase in Progress 


IpPES 
Vpp Erase Suspend 
1 
65 
200 
IJ-A 
Vpp = VPPH, 


Current 
Block Erase Suspended 


VIL 
Input low Voltage 
-0.3 
0.8 
V 


VIH 
Input High Voltage 
2.0 
Vcc + 0.3 
V 


VOL 
Output low Voltage 
0.4 
V 
Vcc = Vcc Min and 
IOL = 4mA 


VOH1 
Output High Voltage 
2.4 
V 
IOH = -2.0mA 


Vcc = VccMin 


VOH2 
Vcc - 
0.2 
IOH = -100 
IJ-A 


Vcc = VccMin 


VPPL 
Vpp during Normal 
3 
0.0 
6.5 
V 
Operations 


VPPH 
Vpp during Write/ 
11.4 
12.0 
12.6 
V 
Erase Operations 


VLKO 
Vcc Erase/Write 
2.0 
V 
lock Voltage 


NOTES: 
1. All currents are in RMS unless otherwise noted. Typical values at Vcc = 3.3V, VPP = 12.0V, T = 2S·C. These currents 
are valid for all product versions (package and speeds). 
2. ICCESis specified with the device de-selected. If the device is read while in erase suspend mode, current draw is the sum 
of ICCESand ICCR. 
3. Block Erases, Word/Byte Writes and Lock Block operations are inhibited when VPP = VPPLand not guaranteed in the 
range between VPPHand VpPL. 
4. Automatic Power SaVings (APS) reduces ICCRto less than 1 mA in static operation. 
5. CMOS Inputs are either Vcc ± O.2Vor GND ± O.2V.TIL Inputs are either VIL or VIH. 


Vcc = 5.0V 
± O.5V, TA = ooe to + 700e 
3/5# 
Pin Set Low for 5V Operations 


Symbol 
Parameter 
Notes 
Mln 
Typ 
Max 
Units 
Test Conditions 


IlL 
Input Load 
1 
±1 
,.,.A 
Vcc = VccMax 
Current 
VIN = VCCor GND 


ILO 
Output Leakage 
1 
±10 
,.,.A 
VCC = VccMax 
Current 
VIN = Vcc or GND 


Iccs 
VccStandby 
1,5 
50 
100 
,.,.A 
Vcc = VccMax 
Current 
CEo#,CE1#,RP# 
= Vcc 
± 


0.2V 
BYTE#, WP#, 3/5# 
= Vcc ± 


0.2V or GND ± O.2V 


2 
4 
mA 
VCC = VCCMax 
CEo#, CEl #, RP# = VIH 
BYTE#, WP#, 3/5# 
= VIH or 


VIL 


ICCD 
VccDeep 
1 
1 
5 
,.,.A 
RP# = GND ± 0.2V 


Power-Down 
Current 


ICCR1 
Vcc Read 
1,4,5 
50 
60 
mA 
Vcc = Vcc Max, 
Current 
CMOS: CEo#, CEl # = GND ± 0.2V 
BYTE'" = GND ± 0.2Vor Vcc ± 0.2V 
Inputs = GND ± 0.2V or 
Vcc ± 0.2V, 
TTL: CEo#, CE1# = VIL, 
BYTE'" = VILorVIH 
Inputs = VIL or VIH', 
f = 10 MHz,lOUT = 0 mA 


ICCR2 
VccRead 
1,4,5 
30 
35 
mA 
Vcc = Vcc Max, 


Current 
CMOS:CEo#,CE1# 
= 


GND ± 0.2V 
BYTE# = Vcc ± 0.2Vor 
GND ± 0.2V 


.. 
Inputs = GND ± 0.2Vor 
VCC ± 0.2V 
TTL:CEo#,CE1'" 
= VIL, 


BYTE # = VIH or VIL 
Inputs = VIL or VIH, 
f = 5 MHz, lOUT = 0 mA 


Iccw 
Vcc Write 
1 
25 
35 
mA 
Word/Byte 
in Progress 


Current 


ICCE 
VccBlock 
1 
18 
25 
mA 
Block Erase in Progress 


Erase Current 


ICCES 
Vcc Erase 
1,2 
5 
10 
mA 
CEo#, CEl # = VIH 
Suspend Current 
Block Erase Suspended 


Ipps 
VppStandby 
1 
±1 
±10 
,.,.A 
Vpp S;; Vcc 
Current 


5.5 
DC Characteristics (Continued) 
Vcc = 5.0V ± O.5V, TA = O·C to + 70·C 
3/5# 
Pin Set Low for 5V Operations 


Symbol 
Parameter 
Notes 
Mln 
Typ 
Max 
Units 
Test Conditions 


IpPD 
Vpp Deep Power- 
1 
0.2 
5 
IJ-A 
RP# = GND ± 0.2V 
Down Current 


IpPR 
Vpp Read Current 
1 
65 
200 
IJ-A 
Vpp> 
Vcc 


Ippw 
Vpp Write Current 
1 
7 
12 
mA 
Vpp = VPPH 
Word/Byte 
Write in Progress 


\ 


IpPE 
Vpp Block Erase 
1 
5 
10 
mA 
Vpp = VPPH 
Current 
Block Erase in Progress 


IpPES 
Vpp Erase Suspend 
1 
65 
200 
IJ-A 
Vpp = VPPH 
Current 
Block Erase Suspended 


VIL 
Input Low Voltage 
-0.5 
0.8 
V 


VIH 
Input High Voltage 
2.0 
Vcc + 0.5 
V 


VOL 
Output Low Voltage 
0.45 
V 
Vcc = VccMin 
IOL = 5.8 mA 


VOH1 
Output High Voltage 
0.85 
V 
IOH = -2.5mA 


Vcc 
Vcc = VccMin 


VOH2 
Vcc - 
0.4 
IOH = -100 
IJ-A 


Vcc = VccMin 


VPPL 
Vpp during Normal 
3 
0.0 
6.5 
V 


Operations 


VPPH 
Vpp during Erase/ 
11.4 
12.0 
12.6 
V 


Write Operations 


VLKO 
Vcc Erase/Write 
2.0 
V 


Lock Voltage 


NOTES: 
1. All currents are in RMS unless otherwise noted. Typical values at Vcc = 5.0V, VPP = 12.0V, T = 25·C. These currents 
are valid for all product versions (package and speeds). 
2. ICCESis specified with the device de-selected. If the device is read while in erase suspend mode, current draw is the sum 
of ICCESand ICCR. 
3. Block Erases, Word/Byte Writes and Lock Block operations are inhibited when VPP = VPPLand not guaranteed in the 
range between VPPHand VpPL. 
4. Automatic Power Saving (APS) reduces ICCRto less than 2 mA in Static operation. 
5. CMOS Inputs are either Vcc ± O.2Vor GND ± O.2V.TTL Inputs are either VIL or VIH. 


• 
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5.6 
AC Characteristics-Read 
Only Operations(1) 
vcc = 3.3V ± 0.3V 
TA = O· to + 70·C 


Versions 
(4) 
28F016SA·120 
28F016SA·150 


Units 


Symbol 
Parameter 
Notes 
Mln 
Max 
Mln 
Max 


tAVAV 
Read Cycle Time 
120 
150 
ns 


tAvEL 
Address 
Setup to 
3 
0 
0 
ns 


CE # Going Low 


tAVGL 
Address 
Setup to 
3 
0 
0 
ns 


OE # Going Low 


tAVQV 
Address 
to Output Delay 
120 
150 
ns 


tELQV 
CE # to Output Delay 
2 
120 
150 
ns 


tpHQV 
RP # High to Output Delay 
620 
750 
ns 


tGLQV 
OE # to Output Delay 
2 
45 
50 
ns 


tELQX 
CE # to Output in Low Z 
3 
0 
0 
ns 


tEHQZ 
CE # to Output in High Z 
3 
50 
55 
ns 


tGLQX 
OE # to Output in Low Z 
3 
0 
0 
ns 


tGHQZ 
OE # to Output in High Z 
3 
30 
40 
ns 


toH 
Output Hold from Address, 
3 
0 
0 
ns 


CE # or OE # Change, 
Whichever 
Occurs First 


tFLQV 
BYTE # to Output Delay 
3 
120 
150 
ns 


tFHQV 


tFLQZ 
BYTE # Low to Output 
3 
30 
40 
ns 


in HighZ 


tELFL 
CE # Low to BYTE # 
3 
5 
5 
ns 


tELFH 
High or Low 


Verslons(4) 
Vcc 
± 5% 
2SF016SAo070(5) 


Vcc 
± 10% 
2SF016SAoOSO!S) 
2SF016SA-l00!S) 
Units 


Symbol 
Parameter 
Notes 
Mln 
Max 
Mln 
Max 
Mln 
Max 


tAVAV 
Read Cycle 
Time 
70 
80 
100 
ns 


tAVEL 
Address 
Setup 
3 
0 
0 
0 
ns 


toCE'" 
Going 
Low 


tAVGL 
Address 
Setup 
3 
0 
0 
0 
ns 
toOE# 
Going 


Low 


tAVQV 
Address 
to 
70 
80 
100 
ns 


Output 
Delay 


tELQV 
CE # to Output 
2 
70 
80 
100 
ns 
Delay 


tpHQV 
RP# 
to Output 
400 
480 
550 
ns 
Delay 


lGLQV 
OE # to Output 
2 
30 
35 
40 
ns 
Delay 


tELQX 
CE # to Output 
3 
0 
0 
0 
ns 
in LowZ 


tEHQZ 
CE # to Output 
3 
25 
30 
35 
ns 
in High Z 


lGLQX 
OE # to Output 
3 
0 
0 
0 
ns 
in LowZ 


lGHQZ 
OE # to Output 
3 
25 
30 
35 
ns 
in High Z 


toH 
Output 
Hold 
3 
0 
0 
0 
ns 
from Address, 
CE# 
orOE# 
Change, 
Whichever 
Occurs 
First 


tFLQV 
BYTE# 
to 
3 
70 
80 
100 
ns 


tFHQV 
Output 
Delay 


tFLQZ 
BYTE# 
Low to 
3 
25 
30 
30 
ns 
Output 
in High Z 


tELFL 
CE# 
Low to 
3 
5 
5 
5 
ns 


tELFH 
BYTE # High or 


Low 


NOTES: 
1. See AC Input/Output 
Reference 
Waveforms 
for timing 
measurements, 
Figures 
5 and 6. 


2. OE'" 
may be delayed 
up to tELQV-lGLQV 
after the falling 
edge of CE# 
without 
impact 
on tELQV' 
3. Sampled, 
not 100% 
tested. 


4. Device 
Speeds 
are defined 
as: 


70/80 ns at Vcc 
= 5.0V equivalent 
to 
120 ns at Vcc 
= 3.3V 
100 ns at Vcc 
= 5.0V equivalent 
to 
150 ns at Vcc 
= 3.3V 


5. See AC Input/Output 
Reference 
Waveforms 
and AC Testing 
Load Circuits 
for High Speed 
Test Configuration. 


6. See Standard 
AC Input/Output 
Reference 
Waveforms 
and AC Testing 
Load Circuit. 


'( CC I"OWlR-UP 


V,H 


ADDRESSES 
(A) 


V'l 


V,H 


CExO 
(E)( 
I) 


V'l 


V'H 


OEO (G) 


V," 


V,H 


WEO (W) 


V'l 


VOH 
HIGH 
Z 
DATA 
(D/a) 


VOL 


5.DV 


V CC 
GNO 


V,H) 
RPO (p) 


V'l 
\ 


NOTE: 
1. CEx" 
is defined as the latter of CEo., or CE," 
going Low or the first of CEo" or CE," 
going High. 


V'H 


ADDRESSES (A) 


Vil 


VOH 


DATA (000-00]) 


VOL 


VOH 


DATA (008-0015) 
HIGH Z 


VOL 


NOTE: 
1. CEx'" 
is defined 
as the latter of CEo'" 
or CE1'" 
going 
Low or the first of CEo'" 
or CE1'" 
going 
High. 


Vcc 
POWER 
UP 


RP# 


(p) 


3/5# 


(y) 


VALID 


5.0V 
OUTPUTS 


Symbol 
Parameter 
Note 
Min 
Max 
Unit 


tPLYL 
RP# 
Low to 3/5# 
Low (High) 
0 
J.Ls 


tPLYH 


tYLPH 
3/5# 
Low (High) to RP# 
High 
1 
2 
J.Ls 


tYHPH 


tPL5V 
RP# 
Low to Vcc at 4.5V Minimum 
2 
0 
J.Ls 


tPL3V 
(to Vcc at 3.0V min or 3.6V max) 


tAVQV 
Address 
Valid to Data Valid 
3 
80 
ns 
for Vcc = 5V ± 10% 


tpHQV 
RP# 
High to Data Valid for 
3 
480 
ns 
Vcc = 5V ± 10% 


NOTES: 
CEo"'. CE1'" and DE'" are switched low after Power-Up. 
1. Minimum of 2 !'-S is required to meet the specified tpHQVtimes. 
2. The power supply may start to switch concurrently with RP'" going Low. 
3. The address access time and RP'" high to data valid time are shown for 5V Vcc operation. Refer to the AC Characteris- 
tics Read Only Operations 3.3V Vcc operation and all other speed options. 


Versions 
28F016SA·120 
28F016SA·150 
Unit 
Symbol 
Parameter 
Notes 
Mln 
Typ 
Max 
Mln 
Typ 
Max 


tAVAV 
Write Cycle Time 
120 
150 
ns 


tVPWH 
Vpp Setup to WE# 
Going High 
3 
100 
100 
ns 


tpHEL 
RP# 
Setup to CE# 
Going Low 
480 
480 
ns 


tELWL 
CE # Setup to WE # Going Low 
10 
10 
ns 


tAVWH 
Address 
Setup to WE # 
2,6 
75 
75 
ns 
Going High 


tOVWH 
Data Setup to WE # Going High 
2,6 
75 
75 
ns 


tWLWH 
WE # Pulse Width 
75 
75 
ns 


tWHOX 
Data Hold from WE # High 
2 
10 
10 
ns 


tWHAX 
Address 
Hold from WE # High 
2 
10 
10 
ns 


tWHEH 
CE # Hold from WE # High 
10 
10 
ns 


tWHWL 
WE # Pulse Width High 
45 
75 
ns 


tGHWL 
Read Recovery 
before Write 
0 
0 
ns 


tWHRL 
WE # High to RY /BY # Going Low 
100 
100 
ns 


tRHPL 
RP# 
Hold from Valid Status 
3 
0 
0 
ns 
Register 
(CSR, GSR, BSR) Data 
and RY /BY # High 


tpHWL 
RP# 
High Recovery 
to 
1 
1 
,""S 
WE # Going Low 


tWHGL 
Write Recovery 
before Read 
95 
120 
ns 


taVVL 
Vpp Hold from Valid Status 
0 
0 
,""S 
Register 
(CSR, GSR, BSR) Data 
and RY /BY # High 


tWHQV1 
Duration of Word/Byte 
4,5 
5 
9 
5 
9 
,""S 
Write Operation 


tWHQV2 
Duration of Block 
4 
0.3 
0.3 
sec 
Erase Operation 
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",om mana write uperations( 1) (Continued) 


VCC = 5.0V ± O.5V 
TA = O·C to + 70·C 


Vcc 
±5% 
2SF016SA-070 
Versions 
Vcc 
±10% 
2SF016SA-oSO 
2SF016SA-100 
Unit 


Symbol 
Parameter 
Notes 
Mln 
Typ 
Max 
Mln 
Typ 
Max 
Mln 
Typ 
Max 


tAVAV 
Write Cycle Time 
70 
80 
100 
ns 


tVPWH 
Vpp Setup to WE # Going 
3 
100 
100 
100 
ns 
High 


tpHEL 
RP # Setup to CE # Going 
480 
480 
480 
ns 
Low 


tELWL 
CE# 
SetuptoWE# 
Going 
0 
0 
0 
ns 
Low 


tAVWH 
Address 
Setup to WE # 
2,6 
50 
50 
50 
ns 
Going High 


tOVWH 
Data Setup to WE# 
Going 
2,6 
50 
50 
50 
ns 
High 


tWLwH 
WE# 
Pulse Width 
40 
50 
50 
ns 


tWHOX 
Data Hold from WE # High 
2 
0 
0 
0 
ns 


tWHAX 
Address 
Hold from WE # 
2 
10 
10 
10 
ns 
High 


tWHEH 
CE # Hold from WE # High 
10 
10 
10 
ns 


tWHwL 
WE # Pulse Width High 
30 
30 
50 
ns 


IGHWL 
Read Recovery 
before 
0 
0 
0 
ns 
Write 


tWHRL 
WE # High to RY /BY # 
100 
100 
100 
ns 
Going Low 


tRHPL 
RP# 
Hold from Valid 
3 
0 
0 
0 
ns 
Status 
Register 
(CSR, 
GSR, BSR) Data and RY / 
BY# 
High 


tpHWL 
RP# 
High Recovery 
to 
1 
1 
1 
",s 
WE # Going Low 


tWHGL 
Write Recovery 
before 
60 
65 
80 
ns 
Read 


taWL 
Vpp Hold from Valid Status 
0 
0 
0 
",s 
Register 
(CSR, GSR, BSR) 
Data and RY /BY # High 


tWHQV1 
Duration 
of Word/Byte 
4,5 
4.5 
6 
4.5 
6 
4.5 
6 
",s 
Write Operation 


tWHQV2 
Duration 
of Block Erase 
4 
0.3 
0.3 
0.3 
sec 
Operation 


NOTES: 
CE# 
is defined 
as the latter 
of CEo# 
or CE1 # going 
Low or the first of CEo# 
or CE1 # going 
High. 


1. Read timings 
during write and erase 
are the same as for normal 
read. 
2. Refer to command 
definition 
tables 
for valid address 
and data values. 


3. Sampled, 
but not 100% 
tested. 


4. Write/Erase 
durations 
are measured 
to valid Status 
Register 
(CSR) Data. 
5. Word/Byte 
write operations 
are typically 
performed 
with 1 Programming 
Pulse. 
6. Address 
and Data are latched 
on the rising edge of WE # for all Command 
Write operations. 
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DEEP 
'WRITE 
OAT A-WRITE 
OR 


POWER-DOWN 
ERASE 
SETUP 
COWWAHD 


ADDRESSES 
(A) 
V ltl 


HOTE I 
V'L 


ADDRESSES 
(A) 
V1H 


I'fOTE2 
V1l 
_____~~:; 
<. 
A_=_RA 
_ 


NOTES: 
1. This address 
string depicts 
Data-Write/Erase 
cycles 
with corresponding 
verification 
via ESRD. 


2. This address 
string depicts 
Data-Write/Erase 
cycles 
with corresponding 
verification 
via CSRD. 


3. This cycle 
is invalid when 
using CSRD for verification 
during 
Data-Write/Erase 
operations. 
4. CEx# 
is defined 
as the latter of CEo# 
or CE1 # going 
Low or the first of CEo# 
or CE1 # going 
High. 


5. RP# 
low transition 
is only to show tRHPL; not valid for above 
Read and Write cycles. 


5.9 
AC Characteristics for CE#-Controlled 
Command Write Operations(1) 


vcc = 3.3V ± 0.3V 
TA = ODCto + 70DC 


Versions 
28F016SA·120 
28F016SA·150 
Unit 


Symbol 
Parameter 
Notes 
Mln 
Typ 
Max 
Mln 
Typ 
Max 


tAVAV 
Write Cycle Time 
120 
150 
ns 


tpHWL 
RP# 
Setup to WE# 
Going Low 
480 
480 
ns 


tVPEH 
VPP Setup to CE # Going high 
3 
100 
100 
ns 


tWLEL 
WE # Setup to CE # Going Low 
0 
0 
ns 


tAVEH 
Address 
Setup to 
2,6 
75 
75 
ns 


CE # Going High 


tDVEH 
Data Setup to CE # Going High 
2,6 
75 
75 
ns 


tELEH 
CE # Pulse Width 
75 
75 
ns 


tEHDX 
Data Hold from CE # High 
2 
10 
10 
ns 


tEHAX 
Address 
Hold from CE # High 
2 
10 
10 
ns 


tEHWH 
WE # Hold from CE # High 
10 
10 
ns 


tEHEL 
CE # Pulse Width High 
45 
75 
ns 


tGHEL 
Read Recovery 
before Write 
0 
0 
ns 


tEHRL 
CE # High to RY /BY # Going Low 
0 
100 
100 
ns 


tRHPL 
RP# 
Hold from Valid Status 
3 
0 
0 
ns 


Register 
(CSR, GSR, BSR) Data 
and RY/BY# 
High 


tpHEL 
RP# 
High Recovery 
to 
1 
1 
,....s 


CE # Going Low 


tEHGL 
Write Recovery 
before Read 
95 
120 
ns 


taWL 
VPP Hold from Valid Status 
0 
0 
,....s 


Register 
(CSR, GSR, BSR) Data 
at RY /BY # High 


tEHQV1 
Duration of Word/Byte 
4,5 
5 
9 
5 
9 
,....s 


Write Operation 


tEHQV2 
Duration of Block 
4 
0.3 
0.3 
sec 


Erase Operation 


Vcc 
±5% 
2SF016SA·070 
Versions 
Vcc 
±10% 
2SF016SA-QSO 
2SF016SA·100 
Unit 


Symbol 
Parameter 
Notes 
Mln 
Typ 
Max 
Mln 
Typ 
Max 
Mln 
Typ 
Max 


tAvAV 
Write Cycle Time 
70 
80 
100 
ns 


tpHWL 
RP# 
Setup to WEll' 
Going 
3 
100 
480 
480 
ns 


Low 


tVPEH 
Vpp Setup to CE # Going 
3 
480 
100 
100 
ns 


High 


tWLEL 
WE # Setup to CE # Going 
0 
0 
0 
ns 


Low 


tAVEH 
Address 
Setup to CE # 
2,6 
50 
50 
50 
ns 


Going High 


tOVEH 
Data Setup to CEll' 
Going 
2,6 
50 
50 
50 
ns 


High 


tELEH 
CE # Pulse Width 
40 
50 
50 
ns 


tEHOX 
Data Hold from CEll' 
High 
2 
0 
n 
n 
n" 


tEHAX 
Address 
Hold from CE # 
2 
10 
10 
10 
ns 


High 


tEHWH 
WE # Hold from CE # High 
10 
10 
10 
ns 


tEHEL 
CE # Pulse Width High 
30 
30 
50 
ns 


lGHEL 
Read Recovery 
before 
0 
0 
0 
ns 
Write 


tEHRL 
CE # High to RY /BY # 
100 
100 
100 
ns 


Going Low 


tRHPL 
RP# 
Hold from Valid 
3 
0 
0 
0 
ns 


Status 
Register 
(CSR, 


GSR, BSR) Data and RY / 
BY# 
High 


tPHEL 
RP# 
High Recovery 
to 
1 
1 
1 
".s 


CE # Going Low 


tEHGL 
Write Recovery 
before 
60 
65 
80 
ns 
Read 


tawL 
Vpp Hold from Valid Status 
0 
0 
0 
".s 


Register 
(CSR, GSR, BSR) 
Data and RY /BY # High 


tEHQV1 
Duration 
of Word/Byte 
4,5 
4.5 
6 
4.5 
6 
4.5 
6 
".s 


Write Operation 


tEHQV2 
Duration 
of Block Erase 
4 
0.3 
0.3 
0.3 
sec 


Operation 


NOTES: 
CEll' 
is defined 
as the latter of CEo# 
or CEl # going 
Low or the first of CEo# 
or CEl # going High. 


1. Read timings 
during write and erase 
are the same as for normal 
read. 


2. Refer to command 
definition 
tables 
for valid address 
and data values. 


3. Sampled, 
but not 100% 
tested. 


4. Write/Erase 
durations 
are measured 
to valid Status 
Data. 


5. Word/Byte 
write operations 
are typically 
performed 
with 
1 Programming 
Pulse. 
6. Address 
and Data are latched 
on the rising edge of CE # for all Command 
Write Operations. 


DEEP 
WRIT( 
DATA-WRITE 
OR 


POWER-DOWN 
ERASE 
SETUP 
COWNAND 


ADDRESSES 
(A) 
V 1M 


HOTE 
1 
Vil 


V" 
ADDRESSES 
(A) 


NOTE 
2 
Vil 
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READ 
COl.lPATIBlE 


STATUS 
REGISTER 
DATA 


-----~~~:_----~ 


NOTES: 
1. This address 
string depicts 
Data-Write/Erase 
cycles 
with corresponding 
verification 
via ESRD. 


2. This address 
string depicts 
Data-Write/Erase 
cycles 
with corresponding 
verification 
via CSRD. 


3. This cycle 
is invalid 
when 
using CSRD for verification 
during 
Data-Write/Erase 
operations. 


4. CEx'" 
is defined 
as the latter of CEo'" 
or CEt'" 
going 
Low or the first of CEo'" 
or CEt'" 
going High. 


5. RP ••• low transition 
is only to show tRHPL; not valid for above 
Read and Write cycles. 


5.10 
AC Characteristics 
for Page Buffer Write Operations(1) 


vcc = 3.3V ± 0.3V 
TA = O·G to + 70·G. 


Versions 
28F016SA·120 
28F016SA·150 
Unit 
Symbol 
Parameter 
Notes 
Mln 
Typ 
Max 
Mln 
Typ 
Max 


tAVAV 
Write Cycle Time 
120 
150 
ns 


tELWL 
GE /I Setup to WE /I Going Low 
10 
10 
ns 


tAVWL 
Address Setup to WE /I Going Low 
3 
0 
0 
ns 


tOVWH 
Data Setup to WE /I Going High 
2 
75 
50 
ns 


tWLWH 
WE/I Pulse Width 
75 
75 
ns 


tWHOX 
Data Hold from WE /I High 
2 
10 
10 
ns 


tWHAX 
Address Hold from WE /I High 
2 
10 
10 
ns 


tWHEH 
CE/I Hold from WE/I 
High 
10 
10 
ns 


tWHWL 
WE /I Pulse Width High 
45 
75 
ns 


tGHWL 
Read Recovery before Write 
0 
0 
ns 


tWHGL 
Write Recovery before Read 
95 
120 
ns 


Versions 
28F016SA-D70 
28F016SA·080 
28F016SA·100 
Unit 
Symbol 
Parameter 
Notes 
Mln 
Typ 
Max 
Mln 
Typ 
Max 
Min 
Typ 
Max 


tAVAV 
Write Cycle Time 
70 
80 
100 
ns 


tELWL 
CE/I Setup to 
0 
0 
0 
ns 
WE /I Going Low 


tAVWL 
Address Setup to 
3 
0 
0 
0 
ns 
WE /I Going Low 


tOVWH 
Data Setup to 
2 
50 
50 
50 
ns 
WE/I Going High 


tWLWH 
WE /I Pulse Width 
40 
50 
50 
ns 


tWHOX 
Data Hold from 
2 
0 
0 
0 
ns 
WE/I 
High 


tWHAX 
Address Hold 
2 
10 
10 
10 
ns 
from WE /I High 


tWHEH 
CE /I Hold from 
10 
10 
10 
ns 
WE/I High 


tWHwL 
WE /I Pulse Width 
30 
30 
50 
ns 
High 


lGHWL 
Read Recovery 
0 
0 
0 
ns 
before Write 


tWHGL 
Write Recovery 
60 
65 
80 
ns 
before Read 


NOTES: 
CE/I is defined as the latter of CEo/l or CEl /I going Low or the first of CEo/l or CEl /I going High. 
1. These are WE#-controlled write timings, equivalent CE#-controlled write timings apply. 
2. Sampled, but not 100% tested. 
3. Address must be valid during the entire WE/I Low pulse. 


CEx# 
(E) 


DATA 
H_,G_H_Z 
f 


(0/0) 
~ 


~.I 
I 
crase ana wora/tsyte 
write Performance(3) 


Vcc = 3.3V ± 0.3V 
TA = O°C to + 70°C 


Symbol 
Parameter 
Notes 
Mln 
Typ(l) 
Max 
Units 
Test Conditions 


tWHRH1 
Word/Byte 
Write Time 
2 
9 
tJos 


tWHRH2 
Block Write Time 
2 
0.6 
2.1 
Sec 
Byte Write Mode 


tWHRH3 
Block Write Time 
2 
0.3 
1.0 
Sec 
Word Write Mode 


Block Erase Time 
2 
0.8 
10 
Sec 


Full Chip Erase Time 
2 
25.6 
Sec 


Symbol 
Parameter 
Notes 
Mln 
Typ(l) 
Max 
Units 
Test Conditions 


tWHRH1 
Word Byte/Write 
Time 
2 
6 
tJos 


tWHRH2 
Block Write Time 
2 
0.4 
2.1 
Sec 
Byte Write Mode 


tWHRH3 
Block Write Time 
2 
0.2 
1.0 
Sec 
Word Write Mode 


Block Erase Time 
2 
0.6 
10 
Sec 


Full Chip Erase Time 
2 
19.2 
Sec 


NOTES: 
1. 25'C. Vpp = 12.0V. 
2. Excludes 
System-Level 
Overhead. 


3. These 
performance 
numbers 
are valid for all speed 
versions. 
• 
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Figure 16. Ice va Frequency 
(Vcc = 5.5V) 
for x8 or x16 Operation 


55 


5Q 
~ 
~ V' 


45 
/' 


40 


~ 
•• 
-.S 
35 
f 
"° 
30 
~ 
~ 
'" 
25 
u 
r- 
_u 
-J 
-0- 85°C 
20 


~ 


-0- 25°C 
I--- 
--fr- ooc 


15 
~ 
10 ,/ 


5 
0 , 


2 
4 
6 
8 
10 
12 
14 
16 


FREQUENCY("Hz) 


290489-19 


Figure 17. Ice va Frequency 
(Vcc = 3.6V) 


for x8 or x16 Operation 
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Figure 20. Access Time (tACC) vs Output Loading 
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Family: Thin Small Outline Package 


Millimeters 
Symbol 
Minimum 
Nominal 
Maximum 
Notes 


A 
1.20 


A1 
0.50 


A2 
0.965 
0.995 
1.025 


b 
0.100 
0.150 
0.200 


c 
0.115 
0.125 
0.135 


D1 
18.20 
18.40 
18.60 


E 
13.80 
14.00 
14.20 
e 
0.50 


D 
19.80 
20.00 
20.20 


L 
0.500 
0.600 
0.700 


N 
56 


0 
0° 
3° 
5° 


Y 
0.100 


Z 
0.150 
0.250 
0.350 


I 
ACCESS 
SPEED 
(ns) 


70 ns (5V, 30 pr), 
80 ns (5V), 120 ns (3.3V) 


lOOns (5V), 150ns 
(3.3V) 


Vcc = 3.3V ± 0.3V 
VCC = 5.0V ± 10% 
VCC = 5.0V ± 5%,30 
pF 


E28F016SA-120 
E28F016SA-080 
E28F016SA-070 


E28F016SA-150 
E28F016SA-100 


Item 
Order 


Number 


Ap-378 
System Optimization 
Using the Enhanced 
Features of the 28F016SA 
292127 


AP-377 
28F016SA 
Software 
Drivers 
292126 


AP-375 
Upgrade Considerations 
from the 28F008SA 
to the 28F016SA 
292124 


ER-33 
ETOX IV Flash Memory Technology-Insight 
to Intel's Fourth Generation 
Process 
294016 
Innovation 
DD28F032SA 
Data Sheet 
290490 


28F008SA 
Data Sheet 
290435 


Number 


001 


Description 


Original Version 


infel~ 
28F008SA 
8-MBIT (1-MBIT x 8) FLASHFILETM MEMORY 


• 
High-Density 
Symmetrically 
Blocked 
Architecture 
- 
Sixteen 
64-Kbyte 
Blocks 


• 
Extended 
Cycling Capability 
-100,000 
Block Erase Cycles 
-1.6 
MIllion Block Erase 
Cycles per Chip 


• 
Automated 
Byte Write and Block Erase 
- 
Command 
User Interface 


...•..Status 
Register 


• 
System 
Performance 
Enhancements 
- 
RY /BY # Status Output 
- 
Erase Suspend 
Capability 


• 
Deep·Powerdown 
Mode 
- 
0.20 /-LAlee Typical 


• 
Very High-Performance 
Read 


- 
85 ns Maximum 
Access 
Time 


• 
SRAM·Compatible 
Write Interface 


• 
Hardware 
Data Protection 
Feature 
- 
Erase/Write 
Lockout 
during Power 


Transitions 


• 
Industry 
Standard 
Packaging 


-40-Lead 
TSOP, 44·Lead 
PSOP 


• 
ETOX III Nonvolatile 
Flash Technology 


- 
12V Byte Write/Block 
Erase 


• 
Independent 
Software 
Vendor 
Support 


- 
Microsoft· 
Flash File System 
(FFS) 


Intel's 
28F008SA 
8-Mbit 
FlashFile™ 
Memory 
is the highest 
density 
nonvolatile 
read/write 
solution 
for solid 


state storage. 
The 28F008SA's 
extended 
cycling, 
symmetrically 
blocked 
architecture, 
fast access 
time, write 


automation 
and low power 
consumption 
provide 
a more reliable, 
lower power, 
lighter weight 
and higher per- 


formance 
alternative 
to traditional 
rotating 
disk technology. 
The 28F008SA 
brings new capabilities 
to portable 


computing. 
Application 
and operating 
system software 
stored in resident 
flash memory 
arrays provide 
instant- 


on, rapid execute-in-place 
and protection 
from obsolescence 
through 
in-system 
software 
updates. 
Resident 


software 
also extends 
system 
battery 
life and increases 
reliability 
by reducing 
disk drive accesses. 


For high density data acquisition 
applications, 
the 28F008SA 
offers a more cost-effective 
and reliable alterna- 


tive to SRAM 
and battery. 
Traditional 
high density 
embedded 
applications, 
such as telecommunications, 
can 


take advantage 
of the 28F008SA's 
nonvolatility, 
blocking 
and minimal 
system 
code requirements 
for flexible 


firmware 
and modular 
software 
designs. 


The 28F008SA 
is offered 
in 40-lead 
TSOP (standard 
and reverse) 
and 44-lead 
PSOP packages. 
Pin assign- 


ments 
simplify 
board 
layout when 
integrating 
multiple 
devices 
in a flash 
memory 
array or subsystem. 
This 


device 
uses an integrated 
Command 
User Interface 
and state machine 
for simplified 
block erasure 
and byte 


write. The 28F008SA 
memory 
map consists 
of 16 separately 
erasable 
64-Kbyte 
blocks. 


Intel's 
28F008SA 
employs 
advanced 
CMOS circuitry 
for systems 
requiring 
low power consumption 
and noise 


immunity. 
Its 85 ns access 
time provides 
superior 
performance 
when compared 
with magnetic 
storage 
media. 


A deep powerdown 
mode lowers power consumption 
to 1 JJoW typical thru Vcc, crucial in portable 
computing, 


handheld 
instrumentation 
and 
other 
low-power 
applications. 
The 
RP# 
power 
control 
input 
also 
provides 


absolute 
data protection 
during system 
powerup/down. 


Manufactured 
on Intel's 
0.8 micron 
ETOX 
process, 
the 
28F008SA 
provides 
the 
highest 
levels 
of quality, 


reliability 
and cost-effectiveness. 


• 


The 
28F008SA 
is 
a 
high-performance 
8·Mbit 
(8,388,608 bit) memory organized as 
1 Mbyte 
(1,048,576 bytes) of 8 bits each. Sixteen 64-Kbyte 
(65,536 byte) blocks are included on the 28F008SA. 
A memory map is shown in Figure 6 of this specifica- 
tion. A block erase operation erases one of the six- 
teen blocks of memory in typically 1.6 seconds, in- 
dependent of the remaining blocks. Each block can 
be independently erased and written 100,000 cy- 
cles. Erase Suspend mode allows system software 
to suspend block erase to read data or execute 
code from any other block of the 28F008SA. 


The 28F008SA is available in the 4D-lead TSOP 
(Thin Small Outline Package, 1.2 mm thick) and 44- 
lead PSOP (Plastic Small Outline) packages. Pin- 
outs are shown in Figures 2 and 4 of this specifica- 
tion. 


The Command User Interface serves as the inter- 
face between the microprocessor or microcontroller 
and the internal operation of the 28F008SA. 


Byte Write and Block 
Erase Automation 
allow 
byte write and block erase operations to be execut- 
ed using a two-write command sequence to the 
Command User Interface. The internal Write State 
Machine (WSM) automatically executes the algo- 
rithms and timings necessary for byte write and 
block 
erase 
operations, 
including 
verifications, 
thereby unburdening the microprocessor or micro- 
controller. Writing of memory data is performed in 
byte increments typically within 9 ,.,.S, an 80% im- 
provement over current flash memory products. Ipp 
byte write and block erase currents 
are 10 mA 
typical, 
30 mA maximum. 
Vpp byte write 
and 
block erase voltage is 11.4V to 12.6V. 


intel~ 


The Status 
Register 
indicates the status of the 
WSM and when the WSM successfully completes 
the desired byte write or block erase operation. 


The RYIBY # output gives an additional indicator of 
WSM activity, providing capability for both hardware 
signal of status (versus software polling) and status 
masking (interrupt masking for background erase, 
for example). Status polling using RY/BY# 
mini- 
mizes both CPU overhead and system power con- 
sumption. When low, RYIBY # indicates that the 
WSM is performing a block erase or byte write oper- 
ation. RYIBY # high indicates that the WSM is ready 
for new commands, block erase is suspended or the 
device is in deep powerdown mode. 


Maximum access time is 85 ns (tACe>over the com- 
mercial temperature range (O°Cto + 70°C) and over 
Vcc supply voltage range (4.5V to 5.5V and 4.75V to 
5.25V). Icc active current (CMOS Read) is 20 mA 
typical, 35 mA maximum at 8 MHz. 


When the CE# and RP# pins are at Vcc, the ICC 
CMOS Standby mode is enabled. 


A Deep Powerdown 
mode is enabled when the 
RP# pin is at GND, minimizing power consumption 
and providing write protection. Icc current in deep 
powerdown is 0.20 ,.,.Atypical. Reset time of 400 ns 
is required from RP# switching high until outputs are 
valid to read attempts. Equivalently, the device has a 
wake time of 1 ,.,.S from RP# high until writes to the 
Command User Interface are recognized by the 
28F008SA. With RP# at GND, the WSM is reset 
and the Status Register is cleared. 


!! 
C 
CE# 
c:.. 
CD 
WE# 
;-" 
OE# 
III 
0' 
RP# 
n~ 
Ciic 
RY!SY# 
.. 
III3 
"0 
- 
AI9 


Vpp 


•••• 
V 
CC 
•••• 
GND 


I 


_. 
€: 


Symbol 
Type 
Name and Function 


Ao-A19 
INPUT 
ADDRESS 
INPUTS for memory addresses. 
Addresses 
are internally 


latched 
during a write cycle. 


DQO-DQ7 
INPUT IOUTPUT 
DATA INPUT/OUTPUTS: 
Inputs data and commands 
during Command 


User Interface 
write cycles; outputs 
data during memory array, Status 


Register 
and Identifier 
read cycles. The data pins are active high and 


float to tri-state 
off when the chip is deselected 
or the outputs are 
disabled. 
Data is internally 
latched during a write cycle. 


CE# 
INPUT 
CHIP ENABLE: Activates 
the device's 
control 
logic, input buffers, 


decoders, 
and sense amplifiers. 
CE# 
is active low; CE# 
high deselects 


the memory device and reduces 
power consumption 
to standby 
levels. 


RP# 
INPUT 
RESET IDEEP 
POWER DOWN: Puts the device in deep powerdown 


mode. RP# 
is active low; RP# 
high gates normal operation. 
RP# 
also 


locks out block erase or byte write operations 
when active low, providing 


data protection 
during power transitions. 
RP # active resets internal 


automation. 
Exit from Deep Powerdown 
sets device to read-array 
mode. 


OE# 
INPUT 
OUTPUT 
ENABLE: Gates the device's 
outputs through the data buffers 


during a read cycle. OE # is active low. 


WE# 
INPUT 
WRITE 
ENABLE: Controls 
writes to the Command 
User Interface 
and 


array blocks. WE # is active low. Addresses 
and data are latched 
on the 


rising edge of the WE # pulse. 


RY/BY# 
OUTPUT 
READY IBUSY #: Indicates the status of the internal Write State 
Machine. 
When low, it indicates 
that the WSM is performing 
a block 


erase or byte write operation. 
RY IBY # high indicates 
that the WSM is 


ready for new commands, 
block erase is suspended 
or the device is in 


deep powerdown 
mode. RY IBY # is always active and does NOT float 


to tri-state 
off when the chip is deselected 
or data outputs are disabled. 


Vpp 
BLOCK ERASE/BYTE 
WRITE 
POWER SUPPLY for erasing blocks of 


the array or writing bytes of each block. 
NOTE: 
With Vpp < VPPLMAX, 
memory contents 
cannot 
be altered. 


Vcc 
DEVICE 
POWER SUPPLY (5V ± 10%, 5V ±5%) 


GND 
GROUND 


Standard 
Pinout 


A,9 
0 


NC 


A,s 
NC 


A,7 
WE# 


A,6 
OE# 


A,s 
RYIsy# 


A" 
D~ 
A,3 
STANDARD 
PINOUT 


D~ 
Al2 
DOs 
CE# 
E28F008SA 
D0, 
vee 
40 
LEAD TSOP 


Vee 


Vpp 
GND 


RP# 
10 mm 
x 20 mm 


GND 


Al1 
0°3 
A,o 
TOP VIEW 
0°2 
Ag 
D~ 


As 
000 


A7 
Ao 
~ 
A, 


AS 
A2 
A, 
A3 
290429-2 


Reverse Plno~t 


NC 
~V 
0 


40 
A,9 
NC 
39 
A,S 
WE# 
3 
38 
A17 
OE# 
, 
37 
A,6 
Ry/sy# 
5 
36 
A,s 


D~ 
6 
35 
A" 


D~ 
7 
REVERSE PINOUT 
3' 
A,3 


DOs 
8 
33 
A,2 


DO, 
9 
F28F008SA 
32 
CE# 


Vee 
10 
40 
LEAD TSOP 


31 
Vee 
GND 
" 
30 
Vpp 


GND 
12 
10mmx20mm 
29 
RP# 


0°3 
13 
28 
A" 


0°2 
14 
TOP VIEW 
27 
A,O 


0°1 
15 
26 
Ag 


0°0 
16 
25 
As 
Ao 
17 
2' 
A7 
A, 
18 
23 
~ 
A2 
19 
22 
AS 
A3 
20 
21 
A, 
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Figure 2. TSOP Lead Configurations 


o 
o. 


,.., 
< 
,.., 
< 
N 
N 
011 
Vl 
Q) 
Vl 


." 
00 
." 
00 


0 
0 
0 
0 


0 
0 
0 
0 


Q) 
Lo- 
Q) 
Lo- 


00 
00 
Vl 
N 
Vl 
N 
> 
Lo- 
> 
Lo- 


." 
< 
." 
< 
N 
N 
011 
Vl 
Q) 
Vl 
." 
00 
." 
00 


0 
0 
0 
0 


0 
0 
0 
0 


Q) 
Lo- 
Q) 
Lo- 


III 
00 
III 
00 
> 
N 
> 
N 
.... 
.... 


00 
00 


NOTE: 
1. Connect all Vcc and GND pins of each device to common power supply outputs. DO NOT leave Vcc or GND inputs 
disconnected. 


Vpp 
1 0 
44 
VCC 
RP" 
43 
CE" 


A,1 
42 
A,z 


A10 
41 
AU 
~ 
40 
A,. 


A8 
39 
A,s 


A7 
38 
A16 


As 
37 
A17 


AS 
PA28FOO8SA 
36 
A,8 


A. 
10 
.4 
LEAD 
PSDP 
A,g 


NC 
11 
0.525" 
X 1.110" 
NC 
TOP VIEW 
NC 
12 
33 
NC 


A3 
13 
32 
NC 


AZ 
14 
31 
NC 


A1 
15 
WE" 


Ao 
16 
OE" 


000 
17 
Ry/SY" 
• 


0°1 
18 
OOy 
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GND 
22 
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Figure 4. PSOP Lead Configuration 
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Figure 5. 28F008SA 
Array Interface 
to Intel386SL 
Microprocessor 
Superset 
through 
PI Bus 
(Including 
RY IBY /I Masking and Selective 
Powerdown), 
for DRAM Backup during System 
SUSPEND, 


Resident 
O/S and Applications 
and Motherboard 
Solid-State 
Disk. 


The 28F008SA includes on-chip write automation to 
manage write and erase functions. The Write State 
Machine allows for: 100% TTL-Ievel control inputs; 
fixed power supplies during block erasure and byte 
write; and minimal processor overhead with RAM- 
like interface timings. 


After initial device powerup, or after return from 
deep powerdown mode (see Bus Operations), the 
28F008SA functions as a read-only memory. Manip- 
ulation of external memory-control pins allow array 
read, standby and output disable operations. Both 
Status Register and intelligent identifiers can also be 
accessed through the Command User Interface 
when Vpp = VPPL. 


This same subset of operations is also available 
when high voltage is applied to the Vpp pin. In addi- 
tion, high voltage on Vpp enables successful block 
erasure and byte writing of the device. All functions 
associated with altering memory contents-byte 
write, block erase, status and intelligent identifier- 
are accessed via the Command User Interface and 
verified thru the Status Register. 


Commands are written using standard microproces- 
sor write timings. Command User Interface contents 
serve as input to the WSM, which controls the block 
erase and byte write circuitry. Write cycles also inter- 
nally latch addresses and data needed for byte write 
or block erase operations. With the appropriate com- 
mand written to the register, standard microproces- 
sor read timings output array data, access the intelli- 
gent identifier codes, or output byte write and block 
erase status for verification. 


Interface software to initiate and poll progress of in- 
ternal byte write and block erase can be stored in 
any of the 28F008SA blocks. This code is copied to, 
and executed from, system RAM during actual flash 
memory update. After successful completion of byte 
write and/or block erase, code/data reads from the 
28F008SA are again possible via the Read Array 
command. Erase suspend/resume capability allows 
system software to suspend block erase to read 
data and execute code from any other block. 
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Command 
User Interface 
and Write 
Automation 


An on-chip state machine controls block erase and 
byte write, freeing the system processor for other 
tasks. After receiving the Erase Setup and Erase 
Confirm commands, the state machine controls 
block pre-conditioning and erase, returning progress 
via the Status Register and RY/BY # output. Byte 
write is similarly controlled, after destination address 
and expected data are supplied. The program and 
erase algorithms of past Intel flash memories are 
now regulated by the state machine, including pulse 
repetition where required and internal verification 
and margining of data. 


Depending on the application, the system designer 
may choose to make the Vpp power supply switcha- 
ble (available only when memory byte writes/block 
erases are required) or hardwired to VPPH.When 
Vpp = VPPL,memory contents cannot be altered. 
The 28F008SA Command User Interface architec- 
ture provides protection from unwanted byte write or 
block erase operations even when high voltage is 
applied to Vpp. Additionally, all functions are dis- 
abled whenever Vcc is below the write lockout volt- 
age VLKO,or when RP# is at VIL. The 28F008SA 
accommodates either design practice and encour- 
ages optimization of the processor-memory inter- 
face. 


The two-step byte write/block erase Command User 
Interface write sequence provides additional soft- 
ware write protection. 


Flash memory reads, erases and writes in-system 
via the local CPU. All bus cycles to or from the flash 
memory conform to standard microprocessor bus 
cycles. 


The 28F008SA has three read modes. The memory 
can be read from any of its blocks, and information 
can be read from the intelligent identifier or Status 
Register. Vpp can be at either VPPLor VPPH. 


intel~ 


The first task is to write the appropriate read mode 
command to the Command User Interface (array, in- 
telligent 
identifier, 
or 
Status 
Register). 
The 
28F008SA automatically resets to Read Array mode 
upon initial device powerup or after exit from deep 
powerdown. The 28F008SA has four control pins, 
two of which must be logically active to obtain data 
at the outputs. Chip Enable (CE#) is the device se- 
lection control, and when active enables the select- 
ed memory device. Output Enable (DE#) is the data 
input/output (000-007) 
direction control, and when 
active drives data from the selected memory onto 
the I/O bus. RP# and WE# must also be at VIH. 
Figure 10 illustrates read bus cycle waveforms. 


Output Disable 


With OE# at a logic-high level (VIH),the device out- 
puts are disabled. Output pins (000-007) 
are 
placed in a high-impedance state. 


CE# at a logic-high level (VIH)places the 28F008SA 
in standby mode. Standby operation disables much 
of the 28F008SA's circuitry and substantially reduc- 
es device power consumption. The outputs (000- 
007) are placed in a high-impedence state indepen- 
dent of the status of DE#. If the 28F008SA is dese- 
lected during block erase or byte write, the device 
will continue functioning and consuming normal ac- 
tive power until the operation completes. 


Mode 
Notes 
RP# 
CE# 
OE# 
WE# 
Ao 
Vpp 
DQO-7 
RV/BV# 


Read 
1,2,3 
VIH 
VIL 
VIL 
VIH 
X 
X 
DOUT 
X 


Output Disable 
3 
VIH 
VIL 
VIH 
VIH 
X 
X 
HighZ 
X 


Standby 
3 
VIH 
VIH 
X 
X 
X 
X 
HighZ 
X 


Deep PowerDown 
VIL 
X 
X 
X 
X 
X 
HighZ 
VOH 


Intelligent Identifier (Mfr) 
VIH 
VIL 
VIL 
VIH 
VIL 
X 
89H 
VOH 


Intelligent Identifier (Device) 
VIH 
VIL 
VIL 
VIH 
VIH 
X 
A2H 
VOH 


Write 
3,4,5 
VIH 
VIL 
VIH 
VIL 
X 
X 
DIN 
X 


NOTES: 
1. Refer to DC Characteristics. 
When 
Vpp 
= VPPL, 
memory 
contents 
can be read but not written 
or erased. 


2. X can be VIL or VIH for control 
pins and addresses, 
and VpPL or VPPH for Vpp. 
See DC Characteristics 
for VPPL and VPPH 
voltages. 
3. RY/BY# 
is VOL when 
the Write 
State 
Machine 
is executing 
internal 
block 
erase 
or byte write algorithms. 
It is VOH when 
the WSM is not busy, in Erase Suspend 
mode 
or deep powerdown 
mode. 
4. Command 
writes 
involVing 
block 
erase or byte write are only successfully 
executed 
when 
VPP = VPPH. 


5. Refer to Table 
3 for valid DIN during 
a write operation. 


Deep Power-Down 


The 28F008SA 
offers 
a deep 
power-down 
feature, 
entered 
when RPlif 
is at VIL. Current 
draw thru Vcc 


is 0.20 p.A typical 
in deep 
power-down 
mode, 
with 


current 
draw 
through 
Vpp typically 
0.1 p.A. During 


read 
modes, 
RPlif-low 
deselects 
the 
memory, 
places 
output 
drivers 
in a high-impedence 
state and 


turns off all internal 
circuits. The 28F008SA 
requires 


time tpHQV (see AC Characteristics-Read-Only 
Op- 


erations) 
after 
return 
from 
powerdown 
until 
initial 


memory 
access 
outputs 
are valid. After this wakeup 


interval, 
normal 
operation 
is restored. 
The 
Com- 
mand User Interlace 
is reset to Read Array, and the 


upper 
5 bits of the Status 
Register 
are cleared 
to 


value 10000, 
upon return to normal 
operation. 


During 
block 
erase 
or byte write 
modes, 
RPlif 
low 


will abort 
either 
operation. 
Memory 
contents 
of the 
block 
being altered 
are no longer 
valid as the data 
will be partially 
written 
or erased. 
Time tpHWL after 
RPlif 
goes to logic-high 
(VIH) is required 
before 
an- 
other command 
can be written. 


This 
use of RPlif 
during 
system 
reset 
is important 


with automated 
write/erase 
devices. 
When the sys- 


tem comes 
out of reset it expects 
to read from the 
flash 
memory. 
Automated 
flash 
memories 
provide 


status 
information 
when 
accessed 
during 
write/ 


erase 
modes. 
If a CPU reset 
occurs 
with 
no flash 


memory 
reset, 
proper 
CPU 
initialization 
would 
not 


occur because 
the flash memory 
would be providing 


the status 
information 
instead 
of array data. 
Intel's 


Flash 
Memories 
allow 
proper 
CPU initialization 
fol- 


lowing 
a system 
reset through 
the use of the RPlif 


input. 
In this application 
RPlif 
is controlled 
by the 


same RESET 1If signal that resets the system 
CPU. 


The intelligent 
identifier 
operation 
outputs 
the manu- 


facturer 
code, 
89H; 
and the device 
code, 
A2H for 


the 28F008SA. 
The system 
CPU can then automati- 


cally 
match 
the device 
with 
its proper 
block 
erase 


and byte write algorithms. 


The 
manufacturer- 
and 
device-codes 
are 
read 
via 


the Command 
User 
Interface. 
Following 
a write 
of 


90H to the Command 
User 
Interface, 
a read from 


address 
location 
OOOOOHoutputs 
the manufacturer 


code 
(89H). 
A read from 
address 
00001 H outputs 


the device 
code 
(A2H). 
It is not necessary 
to have 


high voltage 
applied 
to Vpp to read 
the 
intelligent 


identifiers 
from the Command 
User Interface. 


Bus 
First Bus Cycle 
Second 
Bus Cycle 


Command 
Cycles 
Notes 
Req'd 
Operation 
Address 
Data 
Operation 
Address 
Data 


Read Array/Reset 
1 
1 
Write 
X 
FFH 


Intelligent 
Identifier 
3 
2,3,4 
Write 
X 
90H 
Read 
IA 
110 


Read Status Register 
2 
3 
Write 
X 
70H 
Read 
X 
SRD 


Clear Status Register 
1 
Write 
X 
50H 


Erase Setup/Erase 
Confirm 
2 
2 
Write 
BA 
20H 
Write 
BA 
DOH 


Erase Suspend/Erase 
Resume 
2 
Write 
X 
BOH 
Write 
X 
DOH 


Byte Write Setup/Write 
2 
2,3,5 
Write 
WA 
40H 
Write 
WA 
WD 


Alternate 
Byte Write Setup/Write 
2 
2,3,5 
Write 
WA 
10H 
Write 
WA 
WD 


NOTES: 
1. Bus operations are defined in Table 2. 
2. IA = Identifier Address: OOHfor manufacturer code, 01H for device code. 


BA = Address within the block being erased. 
WA = Address of memory location to be written. 


3. SRD = Data read from Status Register. See Table 4 for a description of the Status Register bits. 


WD = Data to be written at location WA. Data is latched on the rising edge of WE#. 


110 = Data read from Intelligent Identifiers. 
4. Following the Intelligent Identifier command, two read operations access manufacture and device codes. 
5. Either 40H or 10H are recognized by the WSM as the Byte Write Setup command. 
6. Commands other than those shown above are reserved by Intel for future device implementations and should not be 
used. 


Writes to the Command User Interface enable read- 
ing of device data and Intelligent Identifiers. They 
also control inspection and clearing of the Status 
Register. Additionally, when Vpp = VPPH, the Com- 
mand User Interface controls block erasure and byte 
write. The contents of the interface register serve as 
input to the internal state machine. 


The Command User Interface itself does not occupy 
an addressable memory location. The interface reg- 
ister is a latch used to store the command and ad- 
dress and data information needed to execute the 
command. Erase Setup and Erase Confirm com- 
mands require both appropriate command data and 
an address within the block to be erased. The Byte 
Write Setup command requires both appropriate 
command data and the address of the location to be 
written, while the Byte Write command consists of 
the data to be written and the address of the loca- 
tion to be written. 


The Command User Interface is written by bringing 
WEiF to a logic-low level (VII) while CEiF is low. 
Addresses and data are latched on the rising edge 
of WEif. Standard microprocessor write timings are 
used. 


Refer to AC Write Characteristics and the AC Wave- 
forms for Write Operations, Figure 11, for specific 
timing parameters. 


When VPPL is applied to the Vpp pin, read opera- 
tions from the Status Register, intelligent identifiers, 
or array blocks are enabled. Placing VPPH on Vpp 
enables successful byte write and block erase oper- 
ations as well. 


Device operations are selected by writing specific 
commands into the Command User Interface. Table 
3 defines the 28F008SA commands. 


Upon initial device powerup and after exit from deep 
powerdown mode, the 28F008SA defaults to Read 
Array mode. This operation is also initiated by writing 
FFH into the Command User Interface. Microproces- 
sor read cycles retrieve array data. The device re- 
mains enabled for reads until the Command User 
Interface contents are altered. Once the internal 
Write State Machine has started a block erase or 
byte write operation, the device will not recognize 
the Read Array command, until the WSM has com- 
pleted its operation. The Read Array command is 
functional when Vpp = VPPL or VPPH. 


WSMS 
ESS 
ES 
BWS 
VPPS 
R 
R 
R 


SR.7 = WRITE STATE MACHINE STATUS 


1 = Ready 
0= 
Busy 


SR.6 = ERASE SUSPEND STATUS 
1 = Erase Suspended 
o = Erase in Progress/Completed 


SR.5 = ERASE STATUS 


1 = Error in Block Erasure 
o = Successful Block Erase 
SR.4 = BYTE WRITE STATUS 


1 = Error in Byte Write 
o = Successful Byte Write 
SR.3 = Vpp STATUS 
1 = Vpp Low Detect; Operation Abort 
0= 
Vpp OK 
SR.2-5R.O = RESERVED FOR FUTURE 
ENHANCEMENTS 
These bits are reserved for future use and 
should be masked out when polling the Status 
Register. 


NOTES: 
RY/BY # or the Write State Machine Status bit must first 
be checked to determine byte write or block erase com- 
pletion, before the Byte Write or Erase Status bit are 
checked for success. 
If the Byte Write AND Erase Status bits are set to "1"s 
during a block erase attempt, an improper command se- 
quence was entered. Attempt the operation again. 
If Vpp low status is detected, the Status Register must be 
cleared before another byte write or block erase opera- 
tion is attempted. 
The Vpp Status bit, unlike an AID converter, does not 
provide continuous indication of Vpp level. The WSM in- 
terrogates the Vpp level only after the byte write or block 
erase command sequences have been entered and in- 
forms the system if Vpp has not been switched on. The 
Vpp Status bit is not guaranteed to report accurate feed- 
back between VPPLand VPPH. 


Intelligent 
Identifier 
Command 


The 28F008SA contains an Intelligent Identifier op- 
eration, initiated by writing 90H into the Command 
User Interface. Following the command write, a read 
cycle from address OOOOOHretrieves the manufac- 
turer code of 89H. A read cycle from address 
00001H returns the device code of A2H. To termi- 
nate the operation, it is necessary to write another 
valid command into the register. Like the Read Array 
command, the Intelligent Identifier command is func- 
tional when Vpp = VPPL or VpPH. 


Read Status Register Command 


The 28F008SA contains a Status Register which 
may be read to determine when a byte write or block 
erase operation is complete, and whether that oper- 
ation completed successfully. The Status Register 
\ 


may be read at any time by writing the Read Status 
Register command (70H) to the Command User In- 
terface. After writing this command, all subsequent 
read operations output data from the Status Regis- 
ter, until another valid command is written to the 
Command User Interface. The contents 
of the 
Status Register are latched on the falling edge of 
OE# or CE#, whichever occurs last in the read cy- 
cle. OE# or CE# must be toggled to VIH before 
further reads to update the Status Register latch. 
The Read Status Register command functions when 
Vpp = VPPL or VPPH. 


Clear Status Register Command 


The Erase Status and Byte Write Status bits are set 
to "1 "s by the Write State Machine and can only be 
reset by the Clear Status Register Command. These 
bits indicate various failure conditions (see Table 4). 
By allowing system software to control the resetting 
of these bits, several operations may be performed 
(such as cumulatively writing several bytes or eras- 
ing multiple blocks in sequence). The Status Regis- 
ter may then be polled to determine if an error oc- 
curred during that sequence. This adds flexibility to 
the way the device may be used. 


Additionally, the Vpp Status bit (SR.3) MUST be re- 
set by system software before further byte writes or 
block erases are attempted. To clear the Status 
Register, the Clear Status Register command (SOH) 
is written to the Command User Interface. The Clear 
Status Register command is functional when Vpp = 
VPPL or VPPH· 


Erase Setup/Erase 
Confirm 
Commands 


Erase is executed one block at a time, initiated by a 
two-cycle 
command sequence. An Erase Setup 


command (20H) is first written to the Command User 
Interface, followed by the Erase Confirm command 
(DOH). These commands require both appropriate 
sequencing and an address within the block to be 
erased to FFH. Block preconditioning, erase and 
verify are all handled internally by the Write State 
Machine, invisible to the system. After the two-com- 
mand erase sequence is written to it, the 28F008SA 
automatically outputs Status Register data when 
read (see Figure 8; Block Erase Flowchart). The 
CPU can detect the completion of the erase event 
by analyzing the output of the RYIBY # pin, or the 
WSM Status bit of the Status Register. 


When erase is completed, the Erase Status bit 
should be checked. If erase error is detected, the 
Status Register should be cleared. The Command 
User Interface remains in Read Status Register 
mode until further commands are issued to it. 


This two-step sequence of set-up followed by execu- 
tion ensures that memory contents are not acciden- 
3 


tally erased. Also, reliable block erasure can only 
occur when Vpp = VPPH. In the absence of this high 
voltage, memory contents are protected against era- 
sure. If block erase is attempted while Vpp = VPPL, 
the Vpp Status bit will be set to "1". Erase attempts 
while VpPL < Vpp < VPPH produce spurious results 
and should not be attempted. 


Erase Suspend/Erase 
Resume 


Commands 


The Erase Suspend command allows block erase 
interruption in order to read data from another block 
of memory. Once the erase process starts, writing 
the Erase Suspend command (BOH) to the Com- 
mand User Interface requests that the WSM sus- 
pend the erase sequence at a predetermined point 
in the erase algorithm. The 28F008SA continues to 
output Status Register data when read, after the 
Erase Suspend command is written to it. Polling the 
WSM Status and Erase Suspend Status bits will de- 
termine when the erase operation has been sus- 
pended (both will be set to "1"). RYIBY # will also 
transition to VOH. 


At this point, a Read Array command can be written 
to the Command User Interface to read data from 
blocks other than that which is suspended. The only 
other valid commands at this time are Read Status 
Register (70H) and Erase Resume (DOH),at which 
time the WSM will continue with the erase process. 
The Erase Suspend Status and WSM Status bits of 
the Status Register will be automatically cleared and 
RYIBY # will return to VOL. After the Erase Resume 
command is written to it, the 28F008SA automatical- 
ly outputs Status Register data when read (see Fig- 
ure 9; Erase SuspendlResume 
Flowchart). 
Vpp 


must remain at VPPH while the 28F008SA is in Erase 
. Suspend. 


Byte Write Setup/Write 
Commands 
(40H or 10H) 


Byte write is executed by a two-command sequence. 
The Byte Write Setup command (40H or 10H) is writ- 
ten to the Command User Interface, followed by a 
second 
write 
specifying the 
address and 
data 
(latched on the rising edge of WE#) to be written. 
The WSM then takes over, controlling the byte write 
and write verify algorithms internally. After the two- 
command byte write sequence is written to it, the 
28F008SA automatically outputs Status Register 
data when read (see Figure 7; Byte Write Flowchart). 
The CPU can detect the completion of the byte write 
event by analyzing the output of the RY/BY # pin, or 
the WSM Status bit of the Status Register. Only the 
Read Status Register command is valid while byte 
write is active. 


When byte write is complete, the Byte Write Status 
bit should be checked. If byte write error is detected, 
the Status Register should be cleared. The internal 
WSM verify only detects errors for "l"s 
that do not 
successfully write to "O"s. The Command User In- 
terface remains in Read Status Register mode until 
further commands are issued to it. If byte write is 
attempted while Vpp = VPPL, the Vpp Status bit will 
be set to "1". Byte write attempts while VPPL < Vpp 
< VPPH produce spurious results and should not be 
attempted. 


EXTENDED 
BLOCK ERASE/BYTE 
WRITE 
CYCLING 


Intel has designed extended cycling capability into 
its 
ETOX 
flash 
memory 
technologies. 
The 
28F008SA is designed for 100,000 byte write/block 
erase cycles on each of the 
sixteen 64-Kbyte 
blocks. Low electric fields, advanced oxides and 
minimal oxide area per cell subjected to the tunnel- 
ing electric field combine to greatly reduce oxide 
stress and the probability of failure. A 20-Mby'le sol- 
id-state drive using an array of 28F008SAs has a 
MTBF (Mean Time Between Failure) of 33.3 million 
hours(1l, over 600 times more reliable than equiva- 
lent rotating disk technology. 


AUTOMATED 
BYTE WRITE 


The 28F008SA integrates the Quick-Pulse program- 
ming algorithm of prior Intel Flash devices on-chip, 
using the Command User Interface, Status Register 
and Write State Machine (WSM). On-chip integration 
dramatically simplifies system software and provides 
processor interface timings to the Command User 
Interface and Status Register. WSM operation, inter- 
nal verify and Vpp high voltage presence are moni- 
tored and reported via the RY/BY # output and ap- 
propriate Status Register bits. Figure 7 shows a 


system software flowchart for device byte write. The 
entire sequence is performed with Vpp at VPPH. Byte 
write abort occurs when RP# transitions to VIL, or 
Vpp drops to VPPL. Although the WSM is halted, 
byte data is partially written at the location where 
byte write was aborted. Block erasure, or a repeat of 
byte write, is required to initialize this data to a 
known value. 


AUTOMATED 
BLOCK ERASE 


As above, the Quick-Erase algorithm of prior Intel 
Flash devices is now implemented internally, includ- 
ing all preconditioning of block data. WSM opera- 
tion, erase success and Vpp high voltage presence 
are monitored and reported through RY/BY # and 
the Status Register. Additionally, if a command other 
than Erase Confirm is written to the device following 
Erase Setup, both the Erase Status and Byte Write 
Status bits will be set to "l"s. 
When issuing the 


Erase Setup and Erase Confirm commands, they 
should be written to an address within the address 
range of the block to be erased. Figure 8 shows a 
system software flowchart for block erase. 


Erase typically takes 1.6 seconds per block. The 
Erase Suspend/Erase Resume command sequence 
allows suspension of this erase operation to read 
data from a block other than that in which erase is 
being performed. A system software flowchart is 
shown in Figure 9. 


The entire sequence is performed with Vpp at VpPH. 
Abort occurs when RP# transitions to VIL or Vpp 
falls to VPPL, while erase is in progress. Block data is 
partially erased by this operation, and a repeat of 
erase is required to obtain a fully erased block. 


DESIGN 
CONSIDERATIONS 


Three-Line 
Output Control 


The 28F008SA will often be used in large memory 
arrays. Intel provides three control inputs to accom- 
modate multiple memory connections. Three-line 
control provides for: 
a) lowest possible memory power dissipation 
b) complete assurance that data bus contention will 


not occur 


To efficiently use these control inputs, an address 
decoder should enable CE#, while OE# should be 
connected to all memory devices and the system's 
READ# control line. This assures that only selected 
memory devices have active outputs while deselect- 
ed memory devices are in Standby Mode. RP# 
should be connected to the system Powergood sig- 
nal to prevent unintended writes during system pow- 
er transitions. Powergood should also toggle during 
system reset. 


(1)Assumptions: 
10-Kbyte 
file written 
every 
10 minutes. 
(20-Mbyte 
array)/(10-Kbyte 
file) 
~ 
2,000 
file writes 
before 
erase 
required. 


(2000 
files writes/erase) 
x 
(100.000 
cycles 
per 28F008SA 
block) 
~ 
200 million 
file writes. 
(200 
X 
1()6 file writes) 
X (10 min/write) 
X (1 hr/60 
min) 
~ 
33.3 
X 1()6 MTBF. 
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RY/BY # and Byte Write/Block 
Erase 
Polling 


RY IBY /I is a full CMOS output that provides 
a hard- 


ware method 
of detecting 
byte write and block erase 


completion. 
It transitions 
low 
time 
tWHRL after 
a 


write 
or erase command 
sequence 
is written 
to the 


2BFOOBSA. and returns to VOH when the WSM has 
finished 
executing 
the internal 
algorithm. 


RY IBY /I can be connected 
to the interrupt 
input of 


the system CPU or controller. 
It is active at all times, 


not tristated 
if the 2BFOOBSA CE /I or OE /I inputs 


are brought 
to VIH' RY IBY /I is also VOH when the 


device 
is in Erase 
Suspend 
or deep 
powerdown 


modes. 


Bus 
Command 
Comments 
Operation 


Write 
Byte Write 
Data = 40H (10H) 


Setup 
Address = Byte to be written 


Write 
Byte Write 
Data to be written 
Address = Byte to be written 


Standby/Read 
Check 
RY /BY # 


VOH = Ready, VOL = Busy 


or 


Read Status 
Register 


CheckSR.7 
1 = Ready, 0 = Busy 
ToggleOE# 
orCE# 
to 


update Status 
Register 


Repeat 
for subsequent 
bytes 


Full status check can be done after each byte or after a 
sequence 
of bytes 


Write FFH after the last byte write operation 
to reset the 


device to Ready Array Mode 


Bus 
Command 
Comments 
Operation 


Optional 
CPU may already 
have read 


Read 
Status Register 
data in WSM 


Ready polling above 


Standby 
CheckSR.3 
1 = Vpp Low Detect 


Standby 
Check SR.4 


1 = Byte Write Error 


SR.3 MUST be cleared, 
if set during a byte write attempt, 


before further 
attempts 
are allowed 
by the Write State 


Machine. 


SR.4 is only cleared 
by the Clear Status 
Register 
Command, 


in cases where 
multiple 
bytes are written 
before 
full status is 


checked. 


If error is detected, 
clear the Status 
Register 
before 


attempting 
retry or other error recovery. 


vpp Range 


Error 


• 


vpp Range 


Error 


Operation 
""UIIIIIIClIIU 
\iomm 
s 


Write 
Erase 
Data = 20H 


Setup 
Address 
= Within block to be 


erased 


Write 
Erase 
Data = DOH 
Address 
= Within block to be 


erased 


Standby/Read 
Check 
RY /BY # 


VOH = Ready, VOL = Busy 
or 


Read Status 
Register 


CheckSR.7 


1 = Ready, 0 = Busy 
Toggle 
OE4O orCE4O to 


update Status 
Register 


Repeat for subsequent 
bytes 


Full status check can be done after each block or after a 
sequence 
of blocks 


Write FFH after the last block erase operation 
to reset the 


device to Ready Array Mode 


Bus 
Operation 


Optional 
Read 
CPU may already 
have read 


Status 
Register 
data in WSM 


Ready polling above 


CheckSR.3 
1 = Vpp Low Detect 


Check SR.4,5 


Both 1 = Command 
Sequence 


Error 


Standby 
Check SR.5 
' 


1 = Block Erase Error 


SR.3 MUST be cleared, 
if set during a block erase attempt, 


before 
further attempts 
are allowed 
by the Write State 


Machine 


SR.5 is only cleared 
by the Clear Status 
Register 


Command, 
in cases where multiple 
blocks 
are erased 
before full status is checked. 


If error is detected, 
clear the Status 
Register 
before 


attempting 
retry or other error recovery. 
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Bus 
Command 
Comments 
Operation 


Write 
Erase 
Data = BOH 
Suspend 


Write 
Read 
Data = 70H 


Status 
Register 


Standbyl 
Check 
RY IBY # 


Read 
VOH = Ready, VOL = 
Busy or Read Status 
Register 


CheckSR.7 
1 = Ready, 0 = Busy 
ToggleOE4O 
orCE4O to 
Update 
Status 
Register 


Standby 
CheckSR.6 
1 = Suspended 


Write 
Read Array 
Data = FFH 


Read 
Read array data from block 
other than that being 
erased. 


Write 
Erase Resume 
Data = DOH 


Flash memory power switching characteristics re- 
quire careful device decoupling. System designers 
are interested in 3 supply current issues; standby 
current levels (18B),active current levels (Icel and 
transient peaks produced by falling and rising edges 
of CE#. Transient current magnitudes depend on 
the device outputs' capacitive and inductive loading. 
Two-line control and proper decoupling capacitor 
selection will suppress transient voltage 
peaks. 


Each device should have a 0.1 JloFceramic capacitor 
connected between each Vcc 
and GND, and be- 
tween its Vpp and GND. These high frequency, low 
inherent-inductance capacitors should be placed as 
close as possible to package leads. Additionally, for 


every 8 devices, a 4.7 JloFelectrolytic capacitor 
should be placed at the array's power supply con- 
nection between Vcc and GND. The bulk capacitor 
will overcome voltage slumps caused by PC board 
trace inductances. 


Vpp Trace on Printed Circuit Boards 


Writing flash memories, while they reside in the tar- 
get system, requires that the printed circuit board 
designer pay attention to the Vpp 
power supply 
trace. The Vpp pin supplies the memory cell current 
for writing and erasing. Use similar trace widths and 
layout considerations given to the Vcc 
power bus. 


Adequate Vpp supply traces and decoupling will de- 
crease Vpp voltage spikes and overshoots. 


Vcc, Vpp, RP# Transitions 
and the 
Command/Status 
Registers 


Byte write and block erase completion are not guar- 
anteed if Vpp drops below VPPH.If the Vpp Status bit 
of the Status Register (SR.3) is set to "1", a Clear 
Status Register command MUST be issued before 
further byte write/block erase attempts are allowed 
by the WSM. Otherwise, the Byte Write (SR.4) or 
Erase (SR.5) Status bits of the Status Register will 
be set to "1 "s if error is detected. RP# transitions to 
VIL during byte write and block erase also abort the 
operations. Data is partially altered in either case, 
and the command sequence must be repeated after 
normal operation is restored. Device poweroff, or 
RP# transitions to VIL, clear the Status Register to 
initial value 10000 for the upper 5 bits. 


The Command User Interface latches commands as 
issued by system software and is not altered by Vpp 
or CE# transitions or WSM actions. Its state upon 
powerup, after exit from deep powerdown or after 
VCCtransitions below VLKO,is Read Array Mode. 


After byte write or block erase is complete, even 
after Vpp transitions, down to VPPL,the Command 
User Interface must be reset to Read Array mode via 
the' Read Array command if access to the memory 
array is desired. 


Power Up/Down 
Protection 


The 28F008SA is designed to 
offer 
protection 
against accidental block erasure or byte writing dur- 
ing 
power 
transitions. 
Upon 
power-up, 
the 
28F008SA is indifferent as to which power supply, 
Vpp or VCC,powers up first. Power supply sequenc- 
ing is not required. Internal circuitry in the 28F008SA 


intel~ 


ensures that the Command User Interface is reset to 
the Read Array mode on power up. 


A system designer must guard against spurious 
writes for Vcc voltages above VLKO when Vpp is 
active. Since both WE# and CE# must be low for a 
command write, driving either to VIH will inhibit 
writes. The Command User Interface architecture 
provides an added level of protection since altera- 
tion of memory contents only occurs after success- 
ful completion of the two-step command sequences. 


Finally, the device is disabled until RP# is brought to 
VIH,regardless of the state of its control inputs. This 
provides an additional level of memory protection. 


Power Dissipation 


When designing portable systems, designers must 
consider battery power consumption not only during 
device operation, but also for data retention during 
system idle time. Flash nonvolatility increases us- 
able battery life, because the 28F008SA does not 
consume any power to retain code or data when the 
system is off. 


In addition, the 28F008SA's deep powerdown mode 
ensures extremely low power dissipation even when 
system power is applied. For example, portable PCs 
and other power sensitive applications, using an ar- 
ray of 28F008SAs for solid-state storage, can lower 
RP# to VIL in standby or sleep modes, producing 
negligable power consumption. If access to the 
28F008SA is again needed, the part can again be 
read, following the tpHQVand tpHWLwakeup cycles 
required after RP# is first raised back to VIH. See 
AC Characteristics-Read-Only 
and Write Opera- 


tions and Figures 10 and 11 for more information. 
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NOTICE: This data sheet contains 
preliminary infor- 


mation on new products in production. The specifica- 
tions are subject to change without notice. Verily with 
your local Intel Sales office that you have the latest 
data sheet before finalizing a design. 


• WARNING: Stressing the device beyond the "Absolute 
Maximum 
Ratings" 
may 
cause 
permanent 
damage. 


These are stress ratings 
only. Operation 
beyond 
the 
"Operating 
Conditions" 
is not recommended 
and ex- 


tended 
exposure 
beyond 
the 
"Operating 
Conditions" 


may affect device reliability. 


Operating 
Temperature 
During Read 
0·Cto 
+70·C(1) 
During Block Erase/ Byte Write 
Q·C to + 70·C 


Temperature 
Under Bias 
-1 O·C to + 80·C 


Storage 
Temperature 
-65·C 
to + 125·C 


Voltage 
on Any Pin 
(except 
Vee and Vpp) 
with Respect 
to GND 
-2.0V 
to + 7.0V(2) 


Vpp Program 
Voltage 
with 
Respect 
to GND during 
Block Erase/Byte 
Write 
... 
- 2.0V to + 14.0V(2, 3) 


Vee Supply Voltage 
with Respect 
to GND 
- 2.0V to + 7.0V(2) 


Output Short Circuit Current 
100 mA(4) 


NOTES: 
1. Operating temperature is for commercial product defined by this specification. 
2. Minimum DC voltage is -0.5V 
on input/output pins. During transitions, this level may undershoot to -2.0V 
for periods 
• 


<20 ns. Maximum DC voltage on input/output pins is Vcc + 0.5V which, during transitions, may overshoot to Vcc + 2.0V 
for periods < 20 ns. 
3. Maximum DC voltage on Vpp may overshoot to + 14.0V for periods <20 ns. 
4. Output shorted for no more than one second. No more than one output shorted at a time. 
5.5% Vcc specifications reference the 28F008SA-85 in its High Speed configuration. 10% Vcc specifications reference the 
28F008SA-85 in its Standard configuration, and the 28F008SA-120. 


Symbol 
Parameter 
Notes 
Mln 
Max 
Unit 


TA 
Operating 
Temperature 
0 
70 
·C 


Vee 
Vee Supply Voltage 
(10%) 
5 
4.50 
5.50 
V 


Vee 
Vee Supply Voltage 
(5%) 
5 
4.75 
5.25 
V 


Symbol 
Parameter 
Notes 
Mln 
Typ 
Max 
Unit 
Test Condition 


III 
Input Load Current 
1 
±1.0 
p.A 
Vee = VeeMax 
VIN = Vee or GND 


ILa 
Output 
Leakage Current 
1 
±10 
p.A 
Vee = VeeMax 
VOUT = Vee or GND 


Ices 
Vee Standby 
Current 
1,3 
1.0 
2.0 
mA 
Vee = VeeMax 
CE# 
= RP# 
= VIH 


30 
100 
p.A 
Vee = VeeMax 
CE# 
= RP# 
= Vee 
±0.2V 


IceD 
Vee Deep PowerDown 
1 
0.20 
1.2 
p.A 
RP# = GND ±0.2V 


Current 
lOUT (RY/BY#) 
= 0 mA 


leeR 
Vee Read Current 
1 
20 
35 
mA 
Vee = Vee Max, CE# 
= GND 


f = 8 MHz, lOUT = 0 mA 
CMOS Inputs 


25 
50 
mA 
Vee = Vee Max, CE# 
= VIL 


f = 8 MHz, lOUT = 0 mA 
TIL 
Inputs 


~ymDol 
t"arameter 
Notes 
Mrn 
Typ 
Max 
Unit 
Test Condit on 


Iccw 
Vcc Byte Write Current 
1 
10 
30 
mA 
Byte Write In Progress 


ICCE 
Vcc Block Erase Current 
1 
10 
30 
mA 
Block Erase In Progress 


ICCES 
Vcc Erase Suspend 
Current 
1,2 
5 
10 
mA 
Block Erase Suspended 
CE# = VIH 


IpPS 
Vpp Standby Current 
1 
±1 
±15 
/LA 
Vpp ~ Vcc 


90 
200 
/LA 
Vpp> 
Vcc 


IpPD 
Vpp Deep PowerDown 
1 
0.10 
5.0 
/LA 
RP# = GND ±0.2V 
Current 


Ippw 
Vpp Byte Write Current 
1 
10 
30 
mA 
Vpp = VPPH 
Byte Write in Progress 


IpPE 
Vpp Block Erase Current 
1 
10 
30 
mA 
Vpp = VPPH 
Block Erase in Progress 


IpPES 
Vpp Erase Suspend 
1 
90 
200 
/LA 
Vpp = VPPH 


Current 
Block Erase Suspended 


Vil 
Input Low Voltage 
-0.5 
0.8 
V 


VIH 
Input High Voltage 
2.0 
Vcc + 0.5 
V 


VOL 
Output 
Low Voltage 
3 
0.45 
V 
Vcc = VccMin 
IOl = 5.8 mA 


VOH 
Output 
High Voltage 
3 
2.4 
V 
Vcc = VCCMin 
IOH = -2.5 
mA 


VPPl 
Vpp during Normal 
4 
0.0 
6.5 
V 
Operations 


VPPH 
Vpp during Erase/Write 
11.4 
12.0 
12.6 
V 
Operations 


VlKO 
Vcc Erase/Write 
Lock 
2.0 
V 
Voltage 


Symbol 
Parameter 
Typ 
Max 
Unit 
Condition 


CIN 
Input Capacitance 
6 
8 
pF 
VIN = OV 


COUT 
Output Capacitance 
8 
12 
pF 
VOUT = OV 


NOTES: 
1. All currents 
are in RMS unless 
otherwise 
noted. 
Typical 
values 
at Vcc = 5.0V, VPP = 12.0V, T = 25°C. These 
currents 


are valid for all product 
versions 
(packages 
and speeds). 


2. ICCES is specified 
with the device 
deselected. 
If the 28F008SA 
is read while 
in Erase Suspend 
Mode, 
current 
draw is the 


sum of ICCES and ICCR. 
3. Includes 
RY /BY #. 


4. Block 
Erases/Byte 
Writes 
are inhibited 
when 
VPP = VPPL and not guaranteed 
in the range 
between 
VPPH and VPPL. 


5. Sampled, 
not 100% 
tested. 


AC test inputs are driven at VOH(2.4 VnO for a Logic "1" and VOL(0.45 VnO for a Logic 
"0". Input timing begins at VIH(2.0 VnO and VIL (0.8 VnO. Output timing ends at VIHand 
VIL. Input rise and fall times (10% to 90%) < 10 ns. 


CL ~ 100 pF 
CL Includes Jig 


Capac~ance 


RL = 3.3 kll 


HIGH SPEED 
AC INPUT/OUTPUT 
REFERENCE 
WAVEFORM(2) 
HIGH SPEED 
AC TESTING 
LOAD 
CIRCUIT(2) 


::=:J(.-- m;: ~.T' 
--)(.. 
OUT"'T 


CL~30pF 
CL Includes Jig 


Capacitance 


RL = 3.3 kll 


NOTES: 
1. Testing 
characteristics 
for 28F008SA·85 
in Standard 
configuration, 
and 28F008SA·120. 
2. Testing 
characteristics 
for 28F008SA-85 
in High Speed 
configuration. 


Version's 
I 
VCC±5% 
28FOO8SA-85(4) 


I 
VCC±10% 
28FOO8SA-85(5) 
28FOO8SA-120(5) 
Unit 


Symbol 
Parameter 
Notes 
Mln 
Max 
Mln 
Max 
Mln 
Max 


tAVAV 
tRC 
Read Cycle Time 
85 
90 
120 
ns 


tAVQV 
tACC 
Address 
to Output 
Delay 
85 
90 
120 
ns 


tELQV 
teE 
CE;4I to Output 
Delay 
2 
85 
90 
120 
ns 


tpHQV 
tPWH 
RP;41High to Output 
Delay 
400 
400 
400 
ns 


tGLQV 
toE 
OE;4I to Output 
Delay 
2 
40 
45 
50 
ns 


tELQX 
tLZ 
CE;4I to Output 
Low Z 
3 
0 
0 
0 
ns 


tEHQZ 
tHZ 
CE;4I High to Output 
High Z 
3 
55 
55 
55 
ns 


fGLQX 
toLZ 
OE;4I to Output 
Low Z 
3 
0 
0 
0 
ns 


fGHQZ 
tOF 
OE;4I High to Output 
High Z 
3 
30 
30 
30 
ns 


toH 
Output 
Hold from 
3 
0 
0 
0 
ns 
Addresses, 
CE # or OE # 
Change, 
Whichever 
is First 


NOTES: 
1. See AC Input/Output 
Reference 
Waveform 
for timing 
measurements. 


2. OE;4I may be delayed 
up to teE-toE 
after the falling 
edge of CE# 
without 
impact 
on teE. 
3. Sampled, 
not 100% 
tested. 


4. See High Speed 
AC Input/Output 
Reference 
Waveforms 
and High Speed 
AC Testing 
Load Circuits 
for testing 
characteris- 
tics. 
5. See AC Input/Output 
Reference 
Waveforms 
and AC Testing 
Load Circuits 
for testing 
characteristics. 
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Vcc POWER-UP 
STANDBY 
V,H 


ADDRESSES (A) 


V,l 


V,H 


CE# (E) 


." 


V,l 
Iii 
C.. 
ftl 
V,H 
..•. 
? 
DE# (G) 
)lo 
0 
V,l 


=: 
III< 
ftl 
V,H 
~0.. 
WE# (W) 
3~0 
V,l 
.. 
:D 
ftl 
IIIa. 
VOH 
0 
HIGH Z 
"tI 
DATA (0/0) 
ftl 


I. 
.. 
III 
Val 
.. 
0' 
:J 
1/1 


S.OV 


'\§) 
Vcc 


~ 
GND 
IiiiilF 
) 


<= 
~<= 
;:;;g 
RP# (p) 


V,H 


~ 
V,l 
~~ 
\.- 
S· 


290429-13 c[ 
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I 
VCC±5% 
28FOO8SA-85(7) 
Versions 
I 
Vcc±10% 
28FOO8SA·85(8) 
28FOO8SA-12Ql8) 
Unit 


Symbol 
Parameter 
Notes 
Mln 
Max 
Mln 
Max 
Mln 
Max 


tAYAY 
twc 
Write Cycle Time 
85 
90 
120 
ns 


tpHWl 
tps 
RP# 
High Recovery 
to 
2 
1 
1 
1 
).£S 


WE # Going Low 


tElWl 
tes 
CE # Setup to WE # Going 
10 
10 
10 
ns 


Low 


tWlWH 
twP 
WE # Pulse Width 
40 
40 
40 
ns 


tYPWH 
tyPS 
Vpp Setup to WE # Going 
2 
100 
100 
100 
ns 


High 


tAVWH 
tAS 
Address 
Setup to WE # 
3 
40 
40 
40 
ns 


Going High 


tOVWH 
tos 
Data Setup to WE # Going 
4 
40 
40 
40 
ns 


High 


tWHOX 
tOH 
Data Hold from WE# 
High 
5 
5 
5 
ns 


tWHAX 
tAH 
Address 
Hold from WE # 
5 
5 
5 
ns 


High 


tWHEH 
tCH 
CE # Hold from WE # High 
10 
10 
10 
ns 


tWHWl 
tWPH 
WE # Pulse Width High 
30 
30 
30 
ns 


tWHRl 
WE # High to RY IBY # 
100 
100 
100 
ns 
Going Low 


tWHOY1 
Duration 
of By1e Write 
5,6 
6 
6 
6 
).£S 


Operation 


tWHOY2 
Duration 
of Block Erase 
5,6 
0.3 
0.3 
0.3 
see 


Operation 


tWHGl 
Write Recovery 
before 
0 
0 
0 
).£S 


Read 


!aWL 
tYPH 
Vpp Hold from Valid SRD, 
2,6 
0 
0 
0 
ns 
RY/BY# 
High 


NOTES: 
1. Read timing 
characteristics 
during 
erase 
and by1e write operations 
are the same as during 
read-only 
operations. 
Refer to 
AC Characteristics 
for Read-Only 
Operations. 
2. Sampled, 
not 100% 
tested. 


3. Refer to Table 
3 for valid AIN for by1e write or block 
erasure. 
4. Refer to Table 
3 for valid DIN for by1e write or block 
erasure. 
5. The on-chip 
Write 
State 
Machine 
incorporates 
all by1e write 
and block 
erase 
system 
functions 
and overhead 
of standard 
Intel 
flash 
memory, 
including 
by1e program 
and verify 
(by1e write) 
and 
block 
precondition, 
precondition 
verify, 
erase 
and 
erase verify 
(block 
erase). 


6. By1e write 
and block 
erase 
durations 
are measured 
to completion 
(SR.7 = 
1, RY/BY# 
= VOH). Vpp should 
be held at 


VPPH until determination 
of by1e write/block 
erase 
success 
(SR.3/4/5 
= 0) 
7. See High Speed 
AC Input/Output 
Reference 
Waveforms 
and High Speed AC Testing 
Load Circuits 
for testing 
characteris- 
tics. 
8. See AC Input/Output 
Reference 
Waveforms 
and AC Testing 
Load Circuits 
for testing 
characteristics. 


28FOO8SA·85 
28FOO8SA·120 


Parameter 
Notes 
Unit 


Mln 
Typ(1) 
Max 
Mln 
Typ(1) 
Max 


Block Erase Time 
2 
1.6 
10 
1.6 
10 
see 


Block Write Time 
2 
0.6 
2.1 
0.6 
2.1 
see 


NOTES: 
1. 25°C, 12.0 Vpp. 
2. Excludes 
System-Level 
Overhead. 
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WRITE 
WRITE BYTE WRITE OR 
VALID 
ADDRESS 
It 
DATA (BYTE 
WRITE) 
AUTO~ATED 
BYTE WRITE 


ERASE SETUP 
CO~~AND 
OR ERASE CONnR~ 
CO~~AND 
OR ERASE 
DELAY 


VCC POWER-UP 


It 
STANDBY 


V1H 


ADDRESSES 
(A) 


V1L 


VOH 


RY/BY. 
(R) 


VOL 


--€: 


I 
VCC±5% 
28FOO8SA-85(6) 
Versions 
I 
Vcc±10% 
28FOO8SA·85(7) 
28FOO8SA-120(7) 
Unit 


Symbol 
Parameter 
Notes 
Mln 
Max 
Mln 
Max 
Mln 
Max 


tAVAV 
twe 
Write Cycle Time 
85 
90 
120 
ns 


tpHEL 
tps 
RP# 
High Recovery 
to 
2 
1 
1 
1 
,.s 


CE # Going Low 


tWLEL 
tws 
WE 11Setup to CE # Going 
0 
0 
0 
ns 


Low 


tELEH 
tep 
CE # Pulse Width 
50 
50 
50 
ns 


tVPEH 
tvps 
Vpp Setup to CE # Going 
2 
100 
100 
100 
ns 


High 


tAVEH 
tAS 
Address 
Setup to CE 11 
3 
40 
40 
40 
ns 


Going High 


tOVEH 
tos 
Data Setup to CE # Going 
4 
40 
40 
40 
ns 


High 


tEHOX 
tOH 
Data Hold from CE 11High 
5 
5 
5 
ns 


tEHAX 
tAH 
Address 
Hold from CE # 
5 
5 
5 
ns 


High 


tEHWH 
tWH 
WE # Hold from CE 11High 
0 
0 
0 
ns 


tEHEL 
tEPH 
CE 11Pulse Width 
High 
25 
25 
25 
ns 


tEHRL 
CE # High to RY /BY 11 
100 
100 
100 
ns 


Going Low 


tEHOV1 
Duration 
of Byte Write 
5 
6 
6 
6 
,.s 


Operation 


tEHOV2 
Duration 
of Block Erase 
5 
0.3 
0.3 
0.3 
see 


Operation 


tEHGL 
Write Recovery 
before 
0 
0 
0 
,.s 


Read 


taWL 
tVPH 
Vpp Hold from Valid SRD, 
2,5 
0 
0 
0 
ns 


RY/BY11 
High 


NOTES: 
1. Chip-Enable 
Controlled 
Writes: 
Write operations 
are driven 
by the valid combination 
of CE11 and WEll'. 
In systems 
where 


CE 11 defines 
the write pulsewidth 
(within a longer WE # timing waveform), 
all setup, hold and inactive 
WE 11times 
should 
be 


measured 
relative 
to the CE # waveform. 


2. Sampled, 
not 100% 
tested. 
3. Refer to Table 
3 for valid AIN for byte write or block 
erasure. 
4. Refer to Table 
3 for valid DIN for byte write or block 
erasure. 
5. Byte write 
and block 
erase 
durations 
are measured 
to completion 
(SR.7 = 
1, RY/BY# 
= VOH). Vpp should 
be held at 
VPPH until determination 
of byte write/block 
erase success 
(SR.3/4/5 
= 0) 
6. See High Speed AC Input/Output 
Reference 
Waveforms 
and High Speed AC Testing 
Load Circuits 
for testing 
characteris- 


tics. 
7. See AC Input/Output 
Reference 
Waveforms 
and AC Testing 
Load Circuits 
for testing 
characteristics. 
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WRITE 


WRITE BYTE WRITE OR 
VALID 
ADDRESS 
&; DATA (BYTE 
WRITE) 
AUTO~ATED 
BYTE WRITE 


ERASE 
SETUP 
CO~~AND 
OR ERASE 
CONnR~ 
CO~~AND 
OR ERASE 
DELAY 


Vee 
POWER-UP 


&; STANDBY 


VIH 


ADDRESSES 
(A) 


VIL 


VIH 


DATA 
(0/0) 


VIL 


VOH 


RY/BY. 
(R) 
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LACCESS 
SPEED (ns) 


85 ns 
120ns 


PACKAGE 


E = STANDARD 
40 
LEAD 
TSOP 


F = REVERSE 
40 
LEAD 
TSOP 


PA = 44 LEAD 
PSOP 


VALID 
COMBINATIONS 


E28F008SA-85 
F28F008SA·85 
PA28F0085A-85 


E28F008SA-120 
F28F008SA·120 
PA28F0085A·120 


AP-359 


AP-360 


AP-364 


ER-27 


ER-28 


28F008SA-L 
Datasheet 


"28F008SA 
Hardware 
Interfacing" 


"25F008SA 
Software 
Drivers" 


"28F008SA 
Automation 
and Algorithms" 


"The Intel 28F008SA 
Flash Memory" 


"ETOX 
III Flash Memory Technology" 


Order 
Number 
290435 


292094 


292095 


292099 


294011 


290412 


Number 
Description 


002 
Revised from Advanced 
Information 
to Preliminary 


Modified 
Erase Suspend 
Flowchart 
Removed 
-90 speed bin 
Integrated 
-90 characteristics 
into -85 speed bin 


Combined 
Vpp Standby current and Vpp Read 


current into one Vpp Standby current spec with two 
test conditions 
(DC Characteristics 
table) 


Lowered 
VLKO from 2.2V to 2.0V. 


004 
PWD renamed 
to RP# 
for JEDEC standardization 


compatibility. 
Changed 
Ipps Standby current spec from ± 10,."A to 


± 15 ,."Ain DC Characteristics 
table. 
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28F008SA-L 


8-MBIT (1 MBIT x 8) FLASHFILETM MEMORY 
• High-Density 
Symmetrically 
Blocked 
• High-Performance 
Read 


Architecture 
- 
200 ns Maximum 
Access 
Time 
- 
Sixteen 
64-Kbyte 
Blocks 
• Deep-Powerdown 
Mode 
• Low-Yoltage 
Operation 
- 
0.20 ,..,AIce Typical 


- 
-3.3Y ±0.3Y or 5.0Y ± 10% Yee 
• SRAM-Compatlble 
Write Interface 
• Extended 
Cycling Capability 
• Hardware 
Data Protection 
Feature 
-10,000 
Block Erase Cycles 
- 
Erase/Write 
Lockout 
during [)ower 
- 
160,000 Block Erase 
Transitions 


Cycles per Chip 


Industry 
Standard 
Packaging 
Automated 
Byte Write and Block Erase 
• 
• 
- 
40-Lead 
TSOP, 44-Lead 
PSOP 
- 
Command 
User Interface 


- 
Status Register 
• ETOX III Nonvolatile 
Flash Technology 
• System 
Performance 
Enhancements 
-12Y 
Byte Write/Block 
Erase 


- 
RY /BY # Status Output 


- 
Erase Suspend 
Capability 


Intel's 
28F008SA-L 
8 Mbit FlashFile™ 
Memory 
is the highest 
density 
nonvolatile 
read/write 
soluticn 
for solid 
• 
state storage. 
The 28F008SA-L's 
extended 
cycling, symmetrically 
blocked 
architecture, 
fast access 
time, write 
automation 
and very low power consumption 
provide 
a more reliable, 
lower power, 
lighter weight 
and higher 
performance 
alternative 
to traditional 
rotating 
disk technology. 
The 28F008SA-L 
brings 
new capabilities 
to 
portable 
computing. 
Application 
and operating 
system software 
stored in resident flash memory arrays provide 
instant-on, 
rapid 
execute-in-place 
and 
protection 
from 
obsolescence 
through 
in-system 
software 
updates. 


Resident 
software 
also extends 
system 
battery 
life and increases 
reliability 
by reducing 
disk drive accesses. 


For high density 
data acquisition 
applications, 
the 28F008SA-L 
offers a more cost-effective 
and reliable 
alter- 
native to SRAM and battery. Traditional 
high density embedded 
applications, 
such as telecommunications, 
can 
take advantage 
of the 28F008SA-L's 
nonvolatility, 
blocking 
and minimal system code requirements 
"or flexible 
firmware 
and modular 
software 
designs. 


The 28F008SA-L 
is offered 
in 40-lead TSOP (standard 
and reverse) 
and 44-lead 
PSOP packages. 
Pin assign- 
ments 
simplify 
board 
layout 
when 
integrating 
multiple 
devices 
in a flash 
memory 
array or subsystem. 
This 
device 
uses an integrated 
Command 
User Interface 
and state machine 
for simplified 
block erasure 
and byte 
write. The 28F008SA-L 
memory 
map consists 
of 16 separately 
erasable 
64-Kbyte 
blocks. 


Intel's 
28F008SA-L 
employs 
advanced 
CMOS 
circuitry 
for systems 
requiring 
low power 
consurrption 
and 
noise immunity. 
Its 200 ns access 
time provides 
superior 
performance 
when compared 
with magnetic 
storage 
media. A deep powerdown 
mode lowers 
power consumption 
to 0.66 p.W typical 
thru Vcc, 
crucial 
in portable 
computing, 
handheld 
instrumentation 
and other 
low-power 
applications. 
The RP# 
power 
control 
input also 
provides 
absolute 
data protection 
during system 
powerup/down. 


Manufactured 
on Intel's 
0.8 micron 
ETOX process, 
the 28F008SA-L 
provides 
the highest 
levels 
of quality, 
reliability 
and cost-effectiveness. 


The 28F008SA-L 
is a high-performance 8-Mblt 
(8,388,608-bit) 
memory 
organized 
as 
1 Mbyte 
(1,048,576 bytes) of 8 bits each. Sixteen 64·Kbyte 
(65,536-byte) 
blocks 
are 
included 
on 
the 
28F008SA·L. A memory map is shown in Figure 6 of 
this specification. A block erase operation erases 
one of the sixteen blocks of memory in typically 2.0 
seconds, 
independent of the remaining blocks. 


Each block can be independently erased and written 
10,000 cycles. Erase Suspend mode allows sys- 
tem software to suspend block erase to read data or 
execute 
code 
from 
any 
other 
block 
of 
the 
28F008SA·L. 


The 28F008SA·L is available in the 40-lead TSOP 
(Thin Small Outline Package, 1.2 mm thick) and 44- 
lead PSOP (Plastic Small Outline) packages. Pin- 
outs are shown in Figures 2 and 4 of this specifica- 
tion. 


The Command User Interface serves as the inter- 
face between the microprocessor or microcontroller 
and the internal operation of the 28F008SA·L. 


Byte Write and Block 
Erase Automation 
allow 
byte write and block erase operations to be execut- 
ed using a two-write command sequence to the 
Command User Interface. The internal Write State 
Machine (WSM) automatically executes the algo- 
rithms and timings necessary for byte write and 
block 
erase 
operations, 
including 
verifications, 


thereby unburdening the microprocessor or micro· 
controller. Writing of memory data is performed in 
byte increments typically within 11 fJos,Ipp byte 
write and block erase currents are 10 mA typical, 
30 mA maximum. Vpp byte write and block erase 
voltage is 11.4V to 12.6V. 


inteJqp 


The Status 
Register 
indicates the status of the 


WSM and when the WSM successfully completes 
the desired byte write or block erase operation. 


The RYIBY # output gives an additional indicator of 
WSM activity, providing capability for both hardware 
signal of status (versus software polling) and status 
masking (interrupt masking for background erase, 
for example). Status polling using RYIBY # mini- 
mizes both CPU overhead and system power con- 
sumption. When low, RYIBY # indicates that the 
WSM is performing a block erase or byte write oper- 
ation. RYIBY # high indicates that the WSM is ready 
for new commands, block erase is suspended or the 
device is in deep powerdown mode. 


Maximum access time is 200 ns (tACC) over the 
commercial temperature range (O"Cto + 70°C) and 
over Vcc supply voltage range (3.0V to 3.6V and 
4.5V to 5.5V). Icc active current (CMOS Read) is 
5 
mA 
typical, 
12 mA 
maximum 
at 
5 
MHz, 


3.3V ±0.3V. 


When the CE# and RP# pins are at Vcc, the Icc 
CMOS Standby mode is enabled. 


A Deep Powerdown 
mode is enabled when the 


RP# pin is at GND, minimizing power consumption 
and providing write protection. Icc current in deep 
powerdown is 0.20 fJoAtypical. Reset time of 500 ns 
is required from RP# switching high until outputs are 
valid to read attempts. Equivalently, the device has a 
wake time of 1 fJosfrom RP# high until writes to the 
Command User Interface are recognized by the 
28F008SA·L. With RP# at GND, the WSM is reset 
and the Status Register is cleared. 


+- Vcc 
+- GND 
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Symbol 
Type 
Name and Function 


Ao-A19 
INPUT 
ADDRESS 
INPUTS for memory addresses. 
Addresses 
are internally 
latched during a write cycle. 


000-007 
INPUT IOUTPUT 
DATA INPUT IOUTPUTS: 
Inputs data and commands 
during Command 
User Interface 
write cycles; outputs data during memory array, Status 
Register and Identifier 
read cycles. The data pins are active high and 
float to tri-state 
off when the chip is deselected 
or the outputs are 
disabled. 
Data is internally 
latched during a write cycle. 


CE# 
INPUT 
CHIP ENABLE: Activates 
the device's 
control 
logic, input buffers, 
decoders, 
and sense amplifiers. 
CE # is active low; CE # high deselects 
the memory device and reduces power consumption 
to standby 
levels. 


RP# 
INPUT 
RESET I DEEP POWERDOWN: 
Puts the device in deep powerdown 
mode. RP# 
is active low; RP# 
high gates normal operation. 
RP# 
also 
locks out block erase or byte write operations 
when active low, providing 
data protection 
during power transitions. 
RP # active resets internal 
automation. 
Exit from Deep Powerdown 
sets device to read-array 
mode. 


OE# 
INPUT 
OUTPUT 
ENABLE: Gates the device's 
outputs through the data buffers 
during a read cycle. OE# 
is active low. 


WE# 
INPUT 
WRITE 
ENABLE: Controls 
writes to the Command 
User Interface 
and 
array blocks. WE # is active low. Addresses 
and data are latched on the 
rising edge of the WE # pulse. 


RY/BY# 
OUTPUT 
READY IBUSY 
#: Indicates 
the status of the internal Write State 
Machine. When low, it indicates 
that the WSM is performing 
a block 
erase or byte write operation. 
RY IBY # high indicates 
that the WSM is 
ready for new commands, 
block erase is suspended 
or the device is in 
deep powerdown 
mode. RYIBY # is always active and does NOT float 
to tri-state 
off when the chip is deselected 
or data outputs are disabled. 


Vpp 
BLOCK ERASE/BYTE 
WRITE 
POWER SUPPLY for erasing blocks of 
the array or writing bytes of each block. 
NOTE: 
With Vpp < VPPLMAX, 
memory contents 
cannot 
be altered. 


Vcc 
~ 
DEVICE 
POWER SUPPLY (3.3V ±0.3V, 5V ± 10%) 


GND 
GROUND 


intel® 
28i=OO8SA-L 


Standard 
Pinout 


A,9 
0 
A,s 


A,7 


A,6 


A,s 


A1• 


A,3 
STANDARD 
PINOUT 
AI2 
CE# 
E28F008SA-L 


Vcc 


40 
LEAD TSOP 
Vpp 
RP# 
10 mm 
x 20 mm 
A,1 


A,o 
TOP VIEW 


Ag 


As 
A7 
Ag 


As 


A. 


Reverse 
Pinout 
• 
NC 
~V 
0 
.c 
A19 
NC 
3£ 
A1S 
WE# 
3 
3f 
A17 
OE# 
• 
37 
A,6 
RY/SY# 
S 
3E 
A,s 


D~ 
6 
35 
A,. 
DOe 
7 
REVERSE 
PINOUT 


3. 
A13 
DOs 
S 
33 
A,2 


DO. 
9 
F28F008SA-L 
32 
CE# 


Vcc 
10 
40 
LEAD TSOP 


31 
Vcc 
GND 
11 
3C 
Vpp 


GND 
12 
10 mm 
x 20 mm 
2£ 
RP# 


D03 
13 
2f 
All 
D02 
14 
TOP VIEW 
27 
A10 
DOl 
15 
26 
Ag 


DOo 
16 
25 
As 
Ao 
17 
24 
A7 
A, 
18 
23 
A6 
, 
j 


A2 
19 
22 
As 
A3 
20 
21 
A. 
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Figure 2. TSOP Lead Configurations 


o 
o 


1"'1 
...J 
1"'1 
...J 
t-) 
I 
t-) 
I 
00 
<{ 
00 
<{ 
..." 
Vl 
..." 
Vl 
0 
0 
0 
CO 
0 
CO 


00 
0 
00 
0 


Vl 
0 
Vl 
0 
» 


L.- 
» 


L.- 


CO 
CO 
I 
N 
I 
N 
r 
L.- 
r 
L.- 


<J 


..." 
...J 
..." 
...J 
t-) 
I 
t-) 
I 
00 
00 
..." 
<{ 
..." 
<{ 


0 
Vl 
0 
Vl 


0 
CO 
0 
CO 


00 
0 
00 
0 


Vl 
0 
Vl 
0 
» 


L.- 
» 


L.- 


CO 
CO 
I 
N 
I 
N 
r 
w 
r 
w 


00 
00 


NOTE: 
1. Connect all Vcc and GND pins of each device to common power supply outputs: DO NOT leave Vcc or GND inputs 
disconnected. 


~2 


A,3 


AU 


~S 


A'6 


~7 


~8 


~9 
NC 


NC 


NC 


NC 


WEw 


oEW 


RY/BYW 


D'lJ 


D~ 


DOS 


D0. 


VCC 


12V 


Vpp I ~ ~r 
Po,! p;" 


Switch t __ f"""'-J~RESET- 


9 
PA28F008SA- L 36 


10 
•• 
LEAD PSOP 
3S 


11 
O.~2~; ~I~:O" 


12 


13 


14 


15 


16 


17 


18 


19 


20 


21 


22 


READY 


DO-IS 


N 
'"-., 
0 
0 
EPLD(s) 
'" 
RPO 
RPO 
V>,. 


WRo 
WEo 


,!. 


ROO 
OEO 


Vee 
Ry/eyo 


ADo-15 
• 


~6-19 
LATCH 


ALE 


SHE- 


50-2 


ClKOUT 


WRO 


80L 186£8 


ROO 


• 


The 28F008SA-L includes on-chip write automation 
to manage write and erase functions. The Write 
State Machine allows for: 100% TTL-Ievel control 
inputs; fixed power supplies during block erasure 
and byte write; and minimal processor overhead with 
RAM-like interface timings. 


After initial device powerup, or after return from 
deep powerdown mode (see Bus Operations), the 
28F008SA-L functions as a read-only memory. Ma- 
nipulation of external memory-control pins allow ar- 
ray read, standby and output disable operations. 
Both Status Register and intelligent identifiers can 
also be accessed through the Command User Inter- 
face when Vpp = VpPL. 


This same subset of operations is also available 
when high voltage is applied to the Vpp pin. In addi- 
tion, high voltage on Vpp enables successful block 
erasure and byte writing of the device. All functions 
associated 
with 
altering memory contents-byte 
write, block erase, status and intelligent identifier- 
are accessed via the Command User Interface and 
verified thru the Status Register. 


Commands are written using standard microproces- 
sor write timings. Command User Interface contents 
serve as input to the WSM, which controls the block 
erase and byte write circuitry. Write cycles also inter- 
nally latch addresses and data needed for byte write 
or block erase operations. With the appropriate com- 
mand written to the register, standard microproces- 
sor read timings output array data, access the Intelli- 
gent Identifier codes, or output byte write and block 
erase status for verification. 


Interface software to initiate and poll progress of in- 
ternal byte write and block erase can be stored in 
any of the 28F008SA-L blocks. This code is copied 
to, and executed from, system RAM during actual 
flash memory update. After successful completion of 
byte write and/or block erase, code/data reads from 
the 28F008SA-L are again possible via the Read Ar- 
ray command. Erase suspend/resume capability al- 
lows system software to suspend block erase to 
read data and execute code from any other block. 


FFFFF 


FOOOO 
EFFFF 


EOOOO 
DFFFF 


00000 
CFFFF 


COOOO 
BFFFF 


BOOOO 
AFFFF 


AOOOO 
9FFFF 


90000 
8FFFF 


80000 
7FFFF 


70000 
6FFFF 


60000 
5FFFF 


50000 
4FFFF 


40000 
3FFFF 


30000 
2FFFF 


20000 
1FFFF 


10000 
OFFFF 


00000 


64-Kbyte 
Block 


64·Kbyte 
Block 


64·Kbyte 
Block 


64-Kbyte 
Block 


64-byte 
Block 


64-Kbyte 
Block 


64-Kbyte 
Block 


64-Kbyte 
Block 


64-Kbyte 
Block 


64-Kbyte 
Block 


64-Kbyte 
Block 


64-Kbyte 
Block 


64-Kbyte 
Block 


64-Kbyte 
Block 


64-Kbyte 
Block 


64-Kbyte 
Block 


Command 
User Interface 
and Write 
Automation 


An on-chip state machine controls block erase and 
byte write, freeing the system processor for other 
tasks. After receiving the Erase Setup and Erase 
Confirm commands, the state 
machine controls 
block pre-conditioning and erase, returning progress 
via the Status Register and RY/BY # output. Byte 
write is similarly controlled, after destination address 
and expected data are supplied. The program and 
erase algorithms of past Intel flash memories are 
now regulated by the state machine, including pulse 
repetition where required and internal verification 
and margining of data. 


intel~ 


Depending on the application, the system designer 
may choose to make the Vpp power supply switcha- 
ble (available only when memory byte writes/block 
erases are required) or hardwired to VpPH. When 
Vpp = VPPL,memory contents cannot be altered. 
The 28F008SA-L Command User Interface architec- 
ture provides protection from unwanted byte write or 
block erase operations even when high voltage is 
applied to Vpp. Additionally, all functions are dis- 
abled whenever VCCis below the write lockout volt- 
age VLKO,or when RP# is at VIL.The 28F008SA-L 
accommodates either design practice and encour- 
ages optimization of the processor-memory inter- 
face. 


The two-step byte write/block erase Command User 
Interface write sequence provides additional soft- 
ware write protection. 


Flash memory reads, erases and writes in-system 
via the local CPU. All bus cycles to or from the flash 
memory conform to standard microprocessor bus 
cycles. 


The 28F008SA-L has three read modes. The memo- 
ry can be read from any of its blocks, and informa- 
tion can be read from the Intelligent Identifier or 
Status Register. Vpp can be at either VPPLor VPPH. 


The first task is to write the appropriate read mode 
command to the Command User Interface (array, In- 
telligent 
Identifier, 
or 
Status 
Register). 
The 
28F008SA-L automatically resets to Head Array 
mode upon initial device powerup or after exit from 
deep powerdown. The 28F008SA-L has four control 
pins, two of which must be logically acti"e to obtain 
data at the outputs. Chip Enable (CE#) is the device 
selection control, and when active enables the se- 
lected memory device. Output Enable (OE#) is the 
data input/output (000-007) 
direction Gontrol,and 
when active drives data from the selected memory 
onto the I/O bus. RP# and WE# must also be at 
VIH. Figure 10 illustrates read bus cycle waveforms. 


Output Disable 


With OE# at a logic-high level (VIH),the device out- 
puts are disabled. Output pins (000-007) 
are 
placed in a high-impedance state. 


CE# 
at 
a 
logic-high 
level 
(VIH) places 
the 
28F008SA-L in standby mode. Standby operation 
disables much of the 28F008SA-L's circuitry and 
substantially reduces device power consumption. 
The outputs (000-007) 
are placed in a high-impe- 


dence state independent of the status of OE#. If the 
28F008SA-L is deselected during bloc< erase or 
byte write, the device will continue func tioning and 
consuming normal active power until the operation 
completes. 


Mode 
Notes 
RP# 
CE# 
OE# 
WE# 
Ao 
Vpp 
000-7 
RY/BY# 


Read 
1,2,3 
VIH 
VIL 
VIL 
VIH 
X 
X 
DOUT 
X 


Output Disable 
3 
VIH 
VIL 
VIH 
VIH 
X 
X 
HighZ 
X 


Standby 
. 
3 
VIH 
VIH 
X 
X 
X 
X 
HighZ 
X 


Deep PowerDown 
VIL 
X 
X 
X 
X 
X 
HighZ 
VOH 


Intelligent Identifier (Mfr) 
VIH 
VIL 
VIL 
VIH 
VIL 
X 
89H 
VOH 


Intelligent Identifier (Device) 
VIH 
VIL 
VIL 
VIH 
VIH 
X 
A1H 
VOH 


Write 
3,4,5 
VIH 
VIL 
VIH 
VIL 
X 
X 
DIN 
X 


NOTES: 
1. Refer to DC Characteristics. 
When 
VPP = VPPL, memory 
contents 
can be read but not written 
or erased. 


2. X can be VIL or VIH for control 
pins and addresses, 
and VPPL or VPPH for Vpp. See DC Characteristics 
for VPPL and VPPH 
voltages. 
3. RY/BY# 
is VOL when 
the Write 
State 
Machine 
is executing 
internal 
block 
erase 
or byte write algorithms. 
It i3 VOH when 
the WSM 
is not busy, in Erase Suspend 
mode or deep 
powerdown 
mode. 
4. Command 
writes 
involving 
block 
erase 
or byte write are only successfully 
executed 
when 
VPP = VPPH. 


5. Refer to Table 3 for valid DIN during 
a write operation. 


Deep Power-Down 


The 28F008SA-L offers a deep power-down feature, 
entered when RPllf is at VIL. Current draw thru Vcc 
is 0.20 ,.,.Atypical in deep powerdown mode, with 
current draw through Vpp typically 0.1 ,.,.A.During 
read 
modes, 
RPllf-low 
deselects 
the 
memory, 
places output drivers in a high-impedence state and 
turns off all internal circuits. The 28F008SA-L re- 
quires time tpHQV (see AC Characteristics-Read- 
Only Operations) after return from powerdown until 
initial memory access outputs are valid. After this 
wakeup interval, normal operation is restored. The 
Command User Interface is reset to Read Array, and 
the upper 5 bits of the Status Register are cleared to 
value 10000, upon return to normal operation. 


During block erase or byte write modes, RPllf low 
will abort either operation. Memory contents of the 
block being altered are no longer valid as the data 
will be partially written or erased. Time tpHWLafter 
RPllf goes to logic-high (VIH)is required before an- 
other command can be written. 


This use of RPllf during system reset is important 
with automated write/erase devices. When the sys- 
tem come out of reset, it expects to read from the 
flash memory. Automated flash memories provide 


intel~ 


status information when accessed during write/ 
erase modes. If a CPU reset occurs with no flash 
memory reset, proper CPU initialization would not 
occur because the flash memory would be providing 
the status information instead of array data. Intel's 
Flash Memories allow proper CPU initialization fol- 
lowing a system reset through the use of the RPllf 
input. In this application RPllf is controlled by the 
same RESETllf signal that resets the system CPU. 


Intelligent 
Identifier 
Operation 


The Intelligent Identifier operation outputs the manu- 
facturer code, 89H; and the device code, A1H for 
the 28F008SA-L. The system CPU can then auto- 
matically match the device with its proper block 
erase and byte write algorithms. 


The manufacturer- and device-codes are read via 
the Command User Interface. Following a write of 
90H to the Command User Interface, a read from 
address location OOOOOHoutputs the manufacturer 
code (89H). A read from address 00001H outputs 
the device code (A1H). It is not necessary to have 
high voltage applied to Vpp to read the Intelligent 
Identifiers from the Command User Interface. 


Bus 
First Bus Cycle 
Second 
Bus Cycle 
Command 
Cycles 
Notes 
Req'd 
Operation 
Address 
Data 
Operation 
Address 
Data 


Read Array/Reset 
1 
1 
Write 
X 
FFH 


Intelligent Identifier 
3 
2,3,4 
Write 
X 
90H 
Read 
IA 
110 


Read Status Register 
2 
3 
Write 
X 
70H 
Read 
X 
SRD 


Clear Status Register 
1 
Write 
X 
50H 


Erase Setup/Erase Confirm 
2 
2 
Write 
BA 
20H 
Write 
BA 
DOH 


Erase Suspend/Erase Resume 
2 
Write 
X 
BOH 
Write 
X 
DOH 


Byte Write Setup/Write 
2 
2,3,5 
Write 
WA 
40H 
Write 
WA 
WD 


Alternate Byte Write Setup/Write 
2 
2,3,5 
Write 
WA 
10H 
Write 
WA 
WD 


NOTES: 
1. Bus operations are defined in Table 2. 
2. IA = Identifier Address: OOHfor manufacturer code, 01H for device code. 


BA = Address within the block being erased. 
WA = Address of memory location to be written. 


3. SRD = Data read from Status Register. See Table 4 for a description of the Status Register bits. 
WD = Data to be written at location WA. Data is latched on the rising edge of WEt/. 


110 = Data read from Intelligent Identifiers. 
4. Following the Intelligent Identifier command, two read operations access manufacture and device codes. 
5. Either 40H or 10H are recognized by the WSM as the Byte Write Setup command. 
6. Commands other than those shown above are reserved by Intel for future device implementations and should not be 
used. 


Writes to the Command User Interface enable read- 
ing of device data and Intelligent Identifiers. They 
also control inspection and clearing of the Status 
Register. Additionally, when Vpp 
= VPPH, the Com- 
mand User Interface controls block erasure and byte 
write. The contents of the interface register serve as 
input to the internal state machine. 


The Command User Interface itself does not occupy 
an addressable memory location. The interface reg- 
ister is a latch used to store the command and ad- 
dress and data information needed to execute the 
command. Erase Setup and Erase Confirm com- 
mands require both appropriate command data and 
an address within the block to be erased. The Byte 
Write Setup command requires both appropriate 
command data and the address of the location to be 
written, while the Byte Write command consists of 
the data to be written and the address of the loca- 
tion to be written. 


The Command User Interface is written by bringing 
WE'" to a logic-low level (Vtd while CE'" is low. 
Addresses and data are latched on the rising edge 
of WE"'. Standard microprocessor write timings are 
used. 


Refer to AC Write Characteristics and the AC Wave- 
forms for Write Operations, Figure 11, for specific 
timing parameters. 


When VPPL is applied to the Vpp 
pin, read opera- 
tions from the Status Register, Intelligent Identifiers, 
or array blocks are enabled. Placing VPPH on Vpp 
enables successful byte write and block erase oper- 
ations as well. 


Device operations are selected by writing specific 
commands into the Command User Interface. Table 
3 defines the 28F008SA-L commands. 


Upon initial device powerup and after exi·tfrom deep 
powerdown mode, the 
28F008SA-L defaults 
to 
Read Array mode. This operation is also initiated by 
writing FFH into the Command User Interface. Mi- 
croprocessor read cycles retrieve array data. The 
device remains enabled for reads until the Com- 
mand User Interface contents are altered. Once the 
internal Write State Machine has startEld a block 
erase or byte write operation, the device will not rec- 
ognize the Read Array command, until thEIWSM has 
completed its operation. The Read Array command 
is functional when Vpp = VPPL or VPPH. 


The 28F008SA-L contains an Intelligent Identifier 
operation, initiated by writing 90H into the Command 


SR.7 = WRITE 
STATE 
MACHINE 
STATUS 
1 = Ready 
0= 
Busy 


SR.6 = ERASE 
SUSPEND 
STATUS 
1 = Erase Suspended 
o = Erase in Progress/Completed 


SR.5 = ERASE 
STATUS 
1 = Error in Block 
Erasure 
o = Successful 
Block 
Erase 


SR.4 = BYTE WRITE 
STATUS 
1 = Error in Byte Write 
o = Successful 
Byte Write 


SR.3 = Vpp STATUS 
1 = Vpp Low Detect; 
Operation 
Abort 
0= 
Vpp OK 


SR.2-8R.O 
= RESERVED 
FOR FUTURE 
ENHANCEMENTS 
These 
bits 
are 
reserved 
for 
future 
use 
and 
should 
be masked 
out when 
polling 
the Status 
Register. 


NOTES: 


RY/BY# 
or the Write State 
Machine 
Status 
bit must first 
be checked 
to determine 
byte write 
or block 
er~se 
com- 
pletion, 
before 
the 
Byte 
Write 
or 
Erase 
Status 
bit 
are 
checked 
for success. 


If the 
Byte Write 
AND 
Erase 
Status 
bits are set to "1"s 
during 
a block 
erase 
attempt, 
an improper 
command 
se· 
quence 
was entered. 
Attempt 
the operation 
again. 


If Vpp low status 
is detected, 
the Status 
Register 
must be 
cleared 
before 
another 
byte write 
or block 
erase 
opera· 
tion is attempted. 


The 
Vpp 
Status 
bit, unlike 
an AID 
converter, 
does 
not 
provide 
continuous 
indication 
of Vpp level., The WSM in· 
terrogates 
the Vpp level only after the byte write or block 
erase 
command 
sequences 
have 
been 
entereo 
and 
in- 
forms 
the system 
if Vpp has not been 
switched 
on. The 
Vpp Status 
bit is not guaranteed 
to report 
accurate 
feed- 


back between 
VPPL and VPPH. 


cycle 
from address 
OOOOOHretrieves 
the manufac- 


turer 
code 
of 
89H. 
A 
read 
cycle 
from 
address 
00001H 
returns 
the device 
code 
of A1H. To termi- 
nate the operation, 
it is necessary 
to write 
another 


valid command 
into the register. 
Like the Read Array 


command, 
the Intelligent 
Identifier 
command 
is func- 
tional when Vpp = VPPL or VPPH. 


Read Status Register Command 


The 28F008SA-L 
contains 
a Status 
Register 
which 
may be read to determine 
when a byte write or block 
erase operation 
is complete, 
and whether 
that oper- 
ation 
completed 
successfully. 
The 
Status 
Register 
may be read at any time by writing 
the Read Status 
Register 
command 
(70H) to the Command 
User in- 
terface. 
After 
writing 
this command, 
all subsequent 
read operations 
output 
data from the Status 
Regis- 


ter, 
until 
another 
valid 
command 
is written 
to the 
Command 
User 
Interface. 
The 
contents 
of 
the 
Status 
Register 
are latched 
on the falling 
edge 
of 
OE # or CE #, whichever 
occurs 
last in the read cy- 
cle. 
OE# 
or CE# 
must 
be toggled 
to 
VIH before 
further 
reads 
to update 
the 
Status 
Register 
latch. 
The Read Status Register 
command 
functions 
when 


Vpp = VPPL or VPPH. 


The Erase Status and Byte Write Status bits are set 
to "1"s 
by the Write State Machine 
and can only be 
reset by the Clear Status Register 
Command. 
These 
bits indicate 
various failure conditions 
(see Table 4). 


By allowing 
system 
software 
to control 
the resetting 
of these 
bits, several 
operations 
may be performed 
(such as cumulatively 
writing 
several 
bytes or eras- 


ing multiple 
blocks 
in sequence). 
The Status 
Regis- 
ter may then 
be polled 
to determine 
if an error oc- 
curred 
during that sequence. 
This adds flexibility 
to 
the way the device 
may be used. 


Additionally, 
the Vpp Status 
bit (SR.3) MUST be re- 
set by system 
software 
before further 
byte writes or 
block 
erases 
are 
attempted. 
To 
clear 
the 
Status 
Register, 
the Clear Status 
Register 
command 
(50 H) 
is written to the Command 
User Interface. 
The Clear 
Status Register 
command 
is functional 
when Vpp = 
VPPL or VPPH. 


Erase Setup/Erase 
Confirm 
Commands 


Erase is executed 
one block at a time, initiated 
by a 
two-cycle 
command 
sequence. 
An 
Erase 
Setup 
command 
(20H) is first written to the Command 
User 


(DOH). These 
commands 
require 
both 
appropriate 


sequencing 
and an address 
within 
the block 
to be 


erased 
to 
FFH. 
Block 
preconditioning, 
erase 
and 


verify 
are all handled 
internally 
by the Write 
State 


Machine, 
invisible to the system. 
After the two-com- 


mand erase sequence 
is written to it, the 28F008SA-L 


automatically 
outputs 
Status 
Register 
data 
when 


read 
(see 
Figure 
8; Block 
Erase 
Flowchart). 
The 


CPU can detect 
the completion 
of the erase 
event 


by analyzing 
the output 
of the RY IBY # pin, or the 


WSM Status bit of the Status 
Register. 


When 
erase 
is 
completed, 
the 
Erase 
Status 
bit 


should 
be checked. 
If erase 
error 
is detected, 
the 


Status 
Register 
should 
be cleared. 
The 
Command 


User 
Interface 
remains 
in 
Read 
Status 
Register 


mode until further 
commands 
are issued to it. 


This two-step 
sequence 
of set-up followed 
by execu- 


tion ensures 
that memory 
contents 
are not acciden- 


tally 
erased. 
Also, 
reliable 
block 
erasure 
can only 


occur when Vpp = VPPH. In the absence 
of this high 


voltage, 
memory contents 
are protected 
against era- 


sure. If block erase is attempted 
while Vpp = VPPL, 


the VPP Status bit will be set to "1". 
Erase attempts 


while VPPL < Vpp < VPPH produce 
spurious 
results 


and should 
not be attempted. 


Erase Suspend/Erase 
Resume 


Commands 


The 
Erase 
Suspend 
command 
allows 
block 
erase 


interruption 
in order to read data from another 
block 


of memory. 
Once 
the erase 
process 
starts, 
writing 


the 
Erase 
Suspend 
command 
(BOH) to the 
Com- 


mand 
User 
Interface 
requests 
that 
the 
WSM 
sus- 


pend the erase sequence 
at a predetermined 
point 


in the erase 
algorithm. 
The 28F008SA-L 
continues 


to output 
Status 
Register 
data when read, after the 


Erase Suspend 
command 
is written 
to it. Polling the 


WSM Status and Erase Suspend 
Status bits will de- 


termine 
when 
the 
erase 
operation 
has 
been 
sus- 


pended 
(both will be set to "1 "). RY IBY # will also 


transition 
to VOH' 


At this point, a Read Array command 
can be written 


to the Command 
User 
Interface 
to read data from 


blocks other than that which is suspended. 
The only 


other valid commands 
at this time are Read Status 


Register 
(70H) and Erase 
Resume 
(DOH), at which 


time the WSM will continue 
with the erase process. 


The Erase Suspend 
Status and WSM Status 
bits of 


the Status Register will be automatically 
cleared 
and 


RY IBY # will return to VOL' After the Erase Resume 
command 
is written 
to it, the 28F008SA-L 
automati- 


cally outputs 
Status 
Register 
data when 
read 
(see 


Figure 
9; Erase 
SuspendlResume 
Flowchart). 
Vpp 


must 
remain 
at VPPH while 
the 
28F008SA-L 
is in 


Erase Suspend. 
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Byte Write Setup/Write 
Commands 
(40H or 10H) 


Byte write is executed by a two-command sequence. 
The Byte Write Setup command (40H or 10H) is writ- 
ten to the Command User Interface, followed by a 
second 
write 
specifying the 
address and data 
(latched on the rising edge of WE#) to be written. 
The WSM then takes over, controlling the byte write 
and write verify algorithms internally. After the two- 
command byte write sequence is written to it, the 
28F008SA-L automatically outputs Status Register 
data when read (see Figure 7; Byte Write Flowchart). 
The CPU can detect the completion of the byte write 
event by analyzing the output of the RY/BY # pin, or 
the WSM Status bit of the Status Register. Only the 
Read Status Register command is valid while byte 
write is active. 


When byte write is complete, the Byte Write Status 
bit should be checked. If byte write error is detected, 
the Status Register should be cleared. The internal 
WSM verify only detects errors for "1 "s that do not 
successfully write to "O"s. The Command User In- 
terface remains in Read Status Register mode until 
further commands are issued to it. If byte write is 
attempted while Vpp = VPPL, the Vpp Status bit will 
be set to "1". Byte write attempts while VPPL < Vpp 
< VPPH produce spurious results and should not be 
attempted. 


EXTENDED 
BLOCK ERASE/BYTE 
WRITE 
CYCLING 


Intel has designed extended cycling capability into 
its 
ETOX 
flash 
memory 
technologies. 
The 
28F008SA-L is designed for 10,000 byte write/block 
erase cycles on each of the sixteen 64-Kbyte 
blocks. Low electric fields, advanced oxides and 
minimal oxide area per cell subjected to the tunnel- 
ing electric field combine to greatly reduce oxide 
stress and the probability of failure. A 20-Mbyte sol- 
id-state drive using an array of 28F008SA-Ls has a 
MTBF (Mean Time Between Failure) of 3.33 million 
hours(1J,over 60 times more reliable than equivalent 
rotating disk technology. 


The 28F008SA-L integrates the Quick-Pulse pro- 
gramming algorithm of prior Intel Flash Memory de- 
vices on-chip, using the Command User Interface, 
Status Register and Write State Machine (WSM). 
On-chip integration dramatically simplifies system 
software and provides processor interface timings to 
the Command User Interface and Status Register. 
WSM operation, internal verify and Vpp high voltage 
presence 
are 
monitored 
and 
reported 
via 
the 
RY/BY # 
output and appropriate Status Register 


bits. Figure 7 shows a system software fl:>wchartfor 
device byte write. The entire sequence is performed 
with Vpp at VPPH. Byte write abort occurs when AP# 
transitions to VIL, or Vpp drops to VPPL. Although the 
WSM is halted, byte data is partially wr tten at the 
location where byte write was aborted. Block era- 
sure, or a repeat of byte write, is required to initialize 
this data to a known value. 


AUTOMATED 
BLOCK ERASE 


As above, the Quick-Erase algorithm of prior Intel 
Flash devices is now implemented intern:llly, includ- 
ing all preconditioning of block data. WSM opera- 
tion, erase success and Vpp high voltag43presence 
are monitored and reported through AY/BY # and 
the Status Register. Additionally, if a command other 
than Erase Confirm is written to the device following 
Erase Setup, both the Erase Status and Byte Write 
Status bits will be set to "1 "s. When Issuing the 
Erase Setup and Erase Confirm commands, they 
should be written to an address within the address 
range of the block to be erased. Figure 8 shows a 
system software flowchart for block eraS3. 


Erase typically takes 2.0 seconds per olock. The 
Erase Suspend/Erase Resume command sequence 
allows suspension of this erase operation to read 
data from a block other than that in which erase is 
being performed. A system software flowchart is 
shown in Figure 9. 


The entire sequence is performed with Vpp at VPPH. 
Abort occurs when RP# transitions to VIL or Vpp 
falls to VPPL, while erase is in progress. Block data is 
partially erased by this operation, and a. repeat of 
erase is required to obtain a fully erased block. 


DESIGN 
CONSIDERATIONS 


Three-Line 
Output Control 


The 28F008SA-L will often be used in lar~Jememory 
arrays. Intel provides three control inputs to accom- 
modate multiple memory connections. Three-line 
control provides for: 
a) lowest possible memory power dissipation 
b) complete assurance that data bus contention will 
not occur 


To efficiently use these control inputs, an address 
decoder should enable CE#, while OE# should be 
connected to all memory devices and thll system's 
READ# control line. This assures that only selected 
memory devices have active outputs whilEIdeselect- 
ed memory devices are in Standby Mode. RP# 
should be connected to the system Powergood sig- 
nal to prevent unintended writes during system pow- 
er transitions. Powergood should also to£gle during 
system reset. 


(1)Assumptions: 
10-Kbyte 
file written 
every 
10 minutes. 
(20-Mbyte 
array)/(10-Kbyte 
file) = 2,000 
file writes 
before 
erase 
required. 
(2000 
files 
writes/erase) 
X (10,000 
cycles 
per 28F008SA-L 
block) 
= 
20 million 
file writes. 
(20 
X 106 file writes) 
X (10 min/write) 
X (1 hr/60 
min) = 3.33 
X 
106 MTBF. 


RY/BY # and Byte Write/Block 
Erase 
Polling 


RY IBY # is a full CMOS output that provides a hard- 
ware method of detecting byte write and block erase 
completion. It transitions low time tWHRL after a 
write or erase command sequence is written to the 


vpp 
Range 


Error 
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28F008SA-L, and returns to VOH when the WSM 
has finished executing the internal algorithm. 


RY IBY # can be connected to the interrupt input of 
the system CPU or controller. It is active at all times, 
not tristated if the 28F008SA-L CE# or OE# inputs 
are brought to VIH. RY IBY # is also VOHwhen the 
device is in Erase Suspend or deep powerdown 
modes. 


Bus 
Command 
Comments 
Operation 


Write 
Byte Write 
Data = 40H (10H) 


Setup 
Address 
= Byte to be written 


Write 
Byte Write 
Data to be written 
Address 
= Byte to be written 


Standby/Read 
Check RY /BY # 


VOH = Ready, VOL = Busy 
or 


Read Status 
Register 


CheckSR.7 


1 = Ready, 0 = Busy 
Toggle 
OE# 
orCE# 
to 
update Status 
Register 


Repeat 
for subsequent 
bytes 


Full status check can be done after each byte or after a 
sequence 
of bytes 


Write FFH after the last byte write operation 
to reset the 
device to Ready Array Mode 


Bus 
Command 
Operation 
Comments 


Optional 
CPU may already 
have read 
Read 
Status 
Register 
data in WSM 


Ready polling above 


Standby 
Check 
SR.3 


1 = Vpp Low Detect 


Standby 
CheckSR.4 


1 = Byte Write Error 


SR.3 MUST be cleared, 
if set during a byte write attempt, 


before further attempts 
are allowed 
by the Write State 
Machine. 


SR.4 is only cleared 
by the Clear Status 
Register 
Command, 


In cases where multiple 
bytes are written 
before full status is 
checked. 


If error is detected, 
clear the Status Register 
before 


attempting 
retry or other error recovery. 
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vpp Range 


Error 


Bus 
Command 
Commentll 


Operation 


Write 
Erase 
Data = 20H 


Setup 
Address 
= Within block to be 


erased 


Write 
Erase 
Data = DOH 


Address 
= Within block to be 


erased 


Standby/Read 
Check 
RY /BY # 


VOH = Ready, VOL = Busy 
or 


Read Status 
Registor 


CheckSR.7 


1 = Ready, 0 = Busy 
Toggle 
OE # or CE t' to 


update Status 
Register 


Repeat 
for subsequent 
by1es 


Full status check can be done after each block or after a 
sequence 
of blocks 


Write FFH after the last block erase operation 
to reset the 


device to Ready Array Mode 


Bus 
Operation 


Optional 


Read 


CPU may already 
hav.~ read 
Status 
Register 
data in WSM 


Ready polling above 


Check 
SR.3 


1 = Vpp Low Detect 


Check SR.4,5 


Both 1 = Command 
Sequence 


Error 


CheckSR.5 
1 = Block Erase Error 


SR.3 MUST be cleared, 
if set during a block erase attempt. 


before further 
attempts 
are allowed 
by the Write State 


Machine 


SR.5 is only cleared 
by the Clear Status 
Register 


Command. 
in cases where multiple 
blocks 
are era.sed 


before full status is checked. 


If error is detected, 
clear the Status Register 
before 


attempting 
retry or other error recovery. 


• 


Bus 
Command 
Comments 
Operation 


Write 
Erase 
Data = BOH 


Suspend 


Write 
Read 
Data = ?OH 


Status 
Register 


Standbyl 
Check 
RY IBY # 


Read 
VOH = Ready, 


VOL = Busy 
or 


Read Status 
Register 


Check 
SR.? 


1 = Ready, 0 = Busy 
ToggleOE# 
orCE# 
to 


Update Status 
Register 


Standby 
CheckSR.6 
1 = Suspended 


Write 
Read Array 
Data = FFH 


Read 
Read array data from block 
other than that being 
erased. 


Write 
Erase Resume 
Data = DOH 


Flash 
memory 
power 
switching 
characteristics 
re- 
quire 
careful 
device 
decoupling. 
System 
designers 
are interested 
in 3 supply 
current 
issues; 
standby 
current 
levels 
(lSB), active 
current 
levels (Icel and 
transient 
peaks produced 
by falling and rising edges 
of CE #. Transient 
current 
magnitudes 
depend 
on 
the device outputs' 
capacitive 
and inductive 
loading. 


Two-line 
control 
and 
proper 
decoupling 
capacitor 
selection 
will 
suppress 
transient 
voltage 
peaks. 
Each device should have a 0.1 IJ-Fceramic 
capacitor 
connected 
between 
each 
VCC 
and 
GND, 
and 
be- 
tween 
its Vpp and GND. These 
high frequency, 
low 
inherent-inductance 
capacitors 
should 
be placed 
as 
close as possible 
to package 
leads. Additionally, 
for 


every 
8 
devices, 
a 4.7 
IJ-F electrolytic 
capacitor 


should 
be placed 
at the array's 
power 
supply 
con- 


nection 
between 
Vcc 
and GND. The bulk capacitor 


will overcome 
voltage 
slumps 
caused 
by PC board 


trace inductances. 


Vpp Trace on Printed Circuit Boards 


Writing 
flash memories, 
while they reside 
in the tar- 


get system, 
requires 
that 
the 
printed 
circuit 
board 


designer 
pay 
attention 
to 
the 
Vpp 
power 
supply 


trace. The Vpp pin supplies 
the memory 
cell current 


for writing and erasing. 
Use similar trace widths 
and 


layout 
considerations 
given to the Vcc 
power 
bus. 


Adequate 
Vpp supply traces 
and decoupling 
will de- 


crease 
Vpp voltage 
spikes 
and overshoots. 
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Vcc, Vpp, RP# 
Transitions 
and the 
Command/Status 
Registers 


Byte write and block erase completion are not guar- 
anteed if Vpp drops below VPPH.If the Vpp Status bit 
of the Status Register (SR.3) is set to "1", a Clear 
Status Register command MUST be issued before 
further byte write/block erase attempts are allowed 
by the WSM. Otherwise, the Byte Write (SR.4) or 
Erase (SR.5) Status bits of the Status Register will 
be set to "1 "s if error is detected. RP# transitions to 
VIL during byte write and block erase also abort the 
operations. Data is partially altered in either case, 
and the command sequence must be repeated after 
normal operation is restored. Device poweroff, or 
RP# transitions to VIL, clear the Status Register to 
initial value 10000 for the upper 5 bits. 


The Command User Interface latches commands as 
issued by system software and is not altered by Vpp 
or CE# transitions or WSM actions. Its state upon 
powerup, after exit from deep powerdown or after 
Vcc transitions below VLKO,is Read Array Mode. 


After byte write or block erase is complete, even 
after Vpp transitions down to VPPL,the Command 
User Interface must be reset to Read Array mode via 
the Read Array command if access to the memory 
array is desired. 


Power Up/Down 
Protection 


The 28F008SA-L is designed to offer protection 
against accidental block erasure or byte writing dur- 
ing 
power 
transitions. 
Upon 
power-up, 
the 


28F008SA-L is indifferent as to which power supply, 
Vpp or Vcc, powers l,Ipfirst. Power supply sequenc- 
ing 
is 
not 
required. 
Internal 
circuitry 
in 
the 


28F008SA-L ensures that the Command User Inter- 
face is reset to the Read Array mode or power up. 


A system designer must guard again3t spurious 
writes for Vcc voltages above VLKO when Vpp is 
active. Since both WE# and CE# must be low for a 
command write, driving either to VIH will inhibit 
writes. The Command User Interface architecture 
provides an added level of protection since altera- 
tion of memory contents only occurs aft3r success- 
ful completion of the two-step command sequences. 


Finally, the device is disabled until RP# iH brought to 
VIH,regardless of the state of its control inputs. This 
provides an additional level of memory protection. 


Power Dissipation 


When designing portable systems, designers must 
consider battery power consumption not only during 
device operation, but also for data retention during 
system idle time. Flash nonvolatility increases us- 
able battery life, because the 28F008SA·L does not 
consume any power to retain code or da·:awhen the 
system is off. 


In addition, the 28F008SA-L's deep powerdown 
mode ensures extremely low power dissi)ation even 
when system power is applied. For example, porta- 
ble PCs and other power sensitive appli~ations, us- 
ing an array of 28F008SA-Ls for solid-state storage, 
can lower RP# to VIL in standby or slflep modes, 
producing negligable power consumption. If access 
to the 28F008SA-L is again needed, the part can 
again be read, following the tpHQVand tpHWLwake- 
up cycles required after RP# is first raised back to 
VIH. See AC Characteristics-Read-Onl', 
and Write 


Operations and Figures 10 and 11 for metreinforma- 
tion. 


NOTICE: This data sheet 
contains 
information 
on 


products in the sampling and initial production phases 
of development. 
The specifications 
are subject 
to 


change 
without 
notice. 
Verify with your local 
Intel 


Sales office that you have the latest data sheet be- 
fore finalizing a design. 


• WARNING: Stressing the device beyond the "Absolute 
Maximum 
Ratings" 
may 
cause 
permanent 
damage. 


These are stress ratings only. Operation 
beyond 
the 


"Operating 
Conditions" 
is not recommended 
and ex- 


tended 
exposure 
beyond 
the 
"Operating 
Conditions" 


may affect device reliability. 


Operating 
Temperature 
During Read 
O°C to + 70°C(1) 
During Block Erase/Byte 
Write 
O°C to + 70°C 


Temperature 
Under Bias 
-10°C 
to + 80°C 


Storage Temperature 
- 65°C to + 125°C 


Voltage 
on Any Pin 
(except 
Vcc 
and Vpp) 
with Respect 
to GND 
- 2.0V to + 7.0V(2) 


Vpp Program 
Voltage 
with 
Respect 
to GND during 
Block Erase/Byte 
Write ... 
- 2.0V to + 14.0V(2, 3) 


Vcc 
Supply Voltage 
with Respect 
to GND 
- 2.0V to + 7.0V(2) 


Output Short Circuit Current 
100 mA(4) 


NOTES: 
1. Operating temperature is for commercial product defined by this specification. 
2. Minimum DC voltage is -0.5V 
on input/output pins. During transitions, this level may undershoot to -2.0V 
for periods 
<20 ns. Maximum DC voltage on input/output pins is Vcc + 0.5V which, during transitions, may overshoot to Vcc + 2.0V 
for periods < 20 ns. 
3. Maximum DC voltage on Vpp may overshoot to + 14.0V for periods <20 ns. 
4. Output shorted for no more than one second. No more than one output shorted at a time. 
5. AC specifications are valid at both voltage ranges. See DC Characteristics for voltage range specific specification. 


Symbol 
Parameter 
Notes 
Mln 
Max 
Unit 


TA 
Operating 
Temperature 
0 
70 
°C 


Vcc 
Vcc Supply Voltage 
5 
3.00 
3.60 
V 


Vcc 
Vcc Supply Voltage 
5 
4.50 
5.50 
V 


Symbol 
Parameter 
Notes 
Mln 
Typ 
Max 
Unit 
Test Condition 


III 
Input Load Current 
1 
±0.5 
p.A 
Vcc = VccMax 
VIN = VCC or GND 


ILa 
Output Leakage Current 
1 
±0.5 
p.A 
VCC = VCCMax 
VOUT = Vcc or GND 


Iccs 
Vcc Standby Current 
1,3 
20 
50 
p.A 
Vcc = VccMax 
CE# = RP# = VIH 


30 
100 
p.A 
Vcc = VccMax 
CE# = RP# = Vcc 
±0.2V 


ICCD 
Vcc Deep PowerDown 
1 
0.20 
1.0 
p.A 
RP# = GND ±0.2V 


Current 
lOUT (RY/BY#) 
= 0 mA 


ICCR 
Vcc Read Current 
1 
5 
12 
mA 
Vcc = Vcc Max, CE# = GND 
f = 5 MHz, 'OUT = 0 mA 
CMOS Inputs 


5 
12 
mA 
Vcc = Vcc Max, CE# 
= VIL 


f = 8 MHz, lOUT = 0 mA 
TIL 
Inputs 


Symbol 
Parameter 
Notes 
Mln 
Typ 
Max 
Unit 
Test Cond tlon 


leew 
Vee Byte Write Current 
1 
6 
18 
mA 
Byte Write In Progress 


IeeE 
Vee Block Erase Current 
1 
6 
18 
mA 
Block Erase In I~rogress 


leeES 
Vee Erase Suspend 
Current 
1,2 
3 
6 
mA 
Block Erase Suspended 
CE# 
= VIH 


IpPS 
Vpp Standby Current 
1 
±1 
±15 
p.A 
Vpp";: 
Vee 


90 
200 
p.A 
Vpp> 
Vee 


IpPD 
Vpp Deep PowerDown 
1 
0.10 
5.0 
p.A 
RP# 
= GND i:0.2V 


Current 


Ippw 
Vpp Byte Write Current 
1 
10 
30 
mA 
Vpp = VPPH 
Byte Write in Pr:>gress 


IpPE 
Vpp Block Erase Current 
1 
10 
30 
mA 
Vpp = VPPH 
Block Erase in Progress 


IpPES 
Vpp Erase Suspend 
1 
90 
200 
p.A 
Vpp = VPPH 


Current 
Block Erase Su:~pended 


VIL 
Input Low Voltage 
-0.5 
0.6 
V 


VIH 
Input High Voltage 
2.0 
Vee + 0.5 
V 


VOL 
Output Low Voltage 
3 
0.4 
V 
Vee = VeeMil" 
tOL = 2mA 


VOH 
Output High Voltage 
3 
2.4 
V 
Vee = VeeMin 
IOH= 
-2mA 


VPPL 
Vpp during Normal 
4 
0.0 
6.5 
V 
Operations 


VPPH 
Vpp during Erase/Write 
11.4 
12.0 
12.6 
V 
Operations 


VLKO 
Vee Erase/Write 
Lock 
2.0 
V 
Voltage 


Symbol 
Parameter 
Typ 
Max 
Unit 
Condition 


CIN 
Input Capacitance 
6 
8 
pF 
VIN = OV 


COUT 
Output Capacitance 
8 
12 
pF 
VOUT = OV 


NOTES: 
1. All currents 
are in RMS unless 
otherwise 
noted. 
Typical 
values 
at Vcc = 3.3V, VPP = 12.0V, T = 25'e. 
These 
currents 
are valid for all product 
versions 
(packages 
and speeds). 


2. ICCES is specified 
with the device 
deselected. 
If the 28F008SA-L 
is read while 
in Erase 
Suspend 
Mode, 
current 
draw 
is 
the sum of ICCES and ICCR. 
3. Includes 
RY/BY 
.•••. 
4. Block 
Erases/Byte 
Writes 
are inhibited 
when 
VPP = VPPL and not guaranteed 
in the range 
between 
VPPH and VpPL. 


5. Sampled, 
not 100% 
tested. 


Symbol 
Parameter 
Notes 
Mln 
Typ 
Max 
Unit 
Test Condition 


III 
Input Load Current 
1 
±1.0 
p.A 
Vee = VeeMax 
VIN = Vee or GND 


ILO 
Output Leakage Current 
1 
±10 
p.A 
Vee = VeeMax 
VOUT = Vee or GND 


Ices 
Vee Standby 
Current 
1,3 
1.0 
2.0 
mA 
Vee = VeeMax 
CE# 
= RP# = VIH 


30 
100 
p.A 
Vee = VeeMax 
CE# 
= RP# 
= Vee ±0.2V 


ICeD 
Vee Deep PowerDown 
1 
0.20 
1.2 
p.A 
RP# = GND ±0.2V 
Current 
lOUT (RY/BY#) 
= 0 mA 


leeR 
Vee Read Current 
1 
20 
35 
mA 
Vee = Vee Max, CE# 
= GND 


f = 5 MHz, lOUT = 0 mA 
CMOS Inputs 


25 
50 
mA 
Vee = Vee Max, CE# 
= VIL 


f = 5 MHz, lOUT = 0 mA 
TTL Inputs 


leew 
Vee Byte Write Current 
1 
10 
30 
mA 
Byte Write In Progress 


IeeE 
Vee Block Erase Current 
1 
10 
30 
mA 
Block Erase In Progress 


leeES 
Vee Erase Suspend 
Current 
1,2 
5 
10 
mA 
Block Erase Suspended, 
CE# 
= VIH 


Ipps 
Vpp Standby Current 
1 
±1 
±15 
p.A 
Vpp ~ Vee 


IpPD 
Vpp Deep PowerDown 
1 
0.10 
5.0 
p.A 
RP# 
= GND ±0.2V 
Current 


IpPR 
Vpp Read Current 
1 
90 
200 
p.A 
Vpp> 
Vee 


Ippw 
Vpp Byte Write Current 
1 
10 
30 
mA 
Vpp = VPPH 
Byte Write in Progress 


IpPE 
Vpp Block Erase Current 
1 
10 
30 
mA 
Vpp = VPPH 
Block Erase in Progress 


IpPES 
Vpp Erase Suspend 
1 
90 
200 
p.A 
Vpp = VpPH 


Current 
Block Erase Suspended 


VIL 
Input Low Voltage 
-0.5 
0.8 
V 


VIH 
Input High Voltage 
2.0 
Vee + 0.5 
V 


VOL 
Output 
Low Voltage 
3 
0.45 
V 
Vee = VeeMin 
tOL = 5.8mA 


VOH 
Output High Voltage 
3 
2.4 
V 
Vee = VeeMin 
IOH = -2.5mA 


VPPL 
Vpp during Normal 
4 
0.0 
6.5 
V 
Operations 


VPPH 
Vpp during Erase/Write 
11.4 
12.0 
12.6 
V 
Operations 


VLKO 
Vee Erase/Write 
Lock 
2.0 
V 
Voltage 


NOTES: 
1. All currents 
are in RMS unless 
otherwise 
noted. 
Typical 
values 
at Vcc = S.OV, VPP = 12.0V, T = 2S'e. 
These 
currents 


are valid for all product 
versions 
(packages 
and speeds). 


2. ICCES 
is specified 
with the device 
deselected. 
if the 28F008SA-L 
is read while 
in Erase Suspend 
Mode, 
current 
draw is 


the sum of ICCES and 
ICCR. 


3. includes 
RY/BY#. 


4. Block 
Erases/Byte 
Writes 
are inhibited 
when 
VPP = VpPL and not guaranteed 
in the range 
between 
VPPH and VPPL' 


intelQP 


3.0 --IN-P-UT-X.5 
_ 
T[S;T:POINTS_ 
X... 
\._5__ OU_T_PU_T_ 


0.0 


CL=50pF 
CL Includes 
Jig 
Capacitance 
RL ~ 
3.3 kO 


Versions 
28FOO8SA·L200 
Unit 
Symbol 
Parameter 
Notes 
Min 
Max 


tAVAV 
tRC 
Read Cycle Time 
200 
ns 


tAVQV 
tACC 
Address 
to Output Delay 
200 
ns 


tELQV 
teE 
CE II to Output Delay 
2 
200 
ns 


tpHQV 
tpWH 
RPII 
High to Output Delay 
500 
ns 


tGLQV 
toE 
OE II to Output Delay 
2 
85 
ns 


tELQX 
tLZ 
CE II to Output Low Z 
3 
0 
ns 


tEHQZ 
tHZ 
CEil 
High to Output High Z 
3 
55 
ns 


tGLQX 
tOLZ 
OE II to Output Low Z 
3 
0 
ns 


tGHQZ 
tDF 
OE II High to Output High Z 
3 
30 
ns 


toH 
Output Hold from Addresses, 
CE II or OE II 
3 
0 
ns 
Change, Whichever 
is First 


NOTES: 
1. See AC Input/Output Reference Waveform for timing measurements. 
2. OE# may be delayed up to teE-toE after the falling edge of CE# without impact on teE. 
3. Sampled, not 100% tested. 
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Versions 
28FOO8SA·L20(1 


Unit 


Symbol 
Parameter 
Notes 
Min 
Max 


tAVAV 
twc 
Write Cycle Time 
200 
ns 


tpHWL 
tps 
RP# 
High Recovery 
to WE# 
Going Low 
2 
1 
f.Ls 


tELWL 
les 
CE # Setup to WE # Going Low 
20 
ns 


tWLWH 
twP 
WE # Pulse Width 
60 
ns 


tVPWH 
tvps 
Vpp Setup to WE # Going High 
2 
100 
ns 


tAVWH 
tAS 
Address 
Setup to WE# 
Going High 
3 
60 
ns 


tDVWH 
tDS 
Data Setup to WE # Going High 
4 
60 
ns 


tWHDX 
tDH 
Data Hold from WE # High 
5 
ns 


tWHAX 
tAH 
Address 
Hold from WE # High 
5 
ns 


tWHEH 
tCH 
CE # Hold from WE # High 
10 
ns 


tWHWL 
tWPH 
WE # Pulse Width High 
30 
ns 


tWHRL 
WE # High to RY IBY # Going Low 
100 
ns 


tWHOV1 
Duration of Byte Write Operation 
5,6 
6 
f.Ls 


tWHOV2 
Duration of Block Erase Operation 
5,6 
0.3 
sec 


tWHGL 
Write Recovery 
0 
f.Ls 


before Read 


taWL 
tVPH 
Vpp Hold from Valid SRD, RY IBY # High 
2,6 
0 
ns 


NOTES: 
1. Read timing characteristics during erase and byte write operations are the same as during read-only operations. Refer to 
AC Characteristics for Read-Only Operations. 
2. Sampled, not 100% tested. 
3. Refer to Table 3 for valid AIN for byte write or block erasure. 
4. Refer to Table 3 for valid DINfor byte write or block erasure. 
5. The on-chip Write State Machine incorporates all byte write and block erase system functions and overhead of standard 
Intel flash memory, including byte program and verify (byte write) and block precondition, precondition verify, erase and 
erase verify (block erase). 
6. Byte write and block erase durations are measured to completion (SR.7 = 1, RY/BY# 
= VOH)' Vpp should be held at 


VPPHuntil determination of byte write/block erase success (SR.3/4/5 
= 0) 
• 


28FOO8SA·L·200 


Parameter 
Notes 
Unit 


Min 
Typ(1) 
Max 


Block Erase Time 
2 
2.0 
12.5 
sec 


Block Write Time 
2 
0.7 
2.6 
sec 


NOTES: 
1. 25'C, 12.0 Vpp. 
2. Excludes 
System-Level 
Overhead. 
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Vee 
POWER-UP 


<I: 
STANDBY 


V1H 


ADDRESSES 
(A) 


V1L 


WRITE 


WRITE 
BYTE 
WRITE OR 
VALID 
ADDRESS 
<I: 
DATA (BYTE 
WRITE) 
AUTOMATED 
BYTE 
WRITE 


ERASE 
SETUP 
COMMAND 
OR ERASE 
CONriRM 
COMMAND 
OR ERASE 
DELAY 


VIH 


DATA 
(0/0) 


VIL 


VOH 


RY/BY# 
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VOL 


_. 
€: 


Versions 
28FOO8SA-L200 
Unit 


Symbol 
Parameter 
Notes 
Min 
Max 


tAVAV 
twc 
Write Cycle Time 
200 
ns 


tpHEL 
tps 
RP # High Recovery 
to CE # Going Low 
2 
1 
/Ls 


tWLEL 
tws 
WE # Setup to CE # Going Low 
0 
ns 


tELEH 
tep 
CE # Pulse Width 
70 
ns 


tVPEH 
tvps 
Vpp Setup to CE# 
Going High 
2 
100 
ns 


tAVEH 
tAS 
Address 
Setup to CE # Going High 
3 
60 
ns 


tDVEH 
tDS 
Data Setup to CE # Going High 
4 
60 
ns 


tEHDX 
tDH 
Data Hold from CE # High 
5 
ns 


tEHAX 
tAH 
Address 
Hold from CE # High 
5 
ns 


tEHWH 
tWH 
WE # Hold from CE # High 
0 
ns 


tEHEL 
tEPH 
CE # Pulse Width High 
25 
ns 


tEHRL 
CE # High to RY IBY # Going Low 
100 
ns 


tEHOV1 
Duration of Byte Write Operation 
5 
6 
/Ls 


tEHOV2 
Duration of Block Erase Operation 
5 
0.3 
sec 


tEHGL 
Write Recovery 
before Read 
0 
/Ls 


tOWL 
tVPH 
Vpp Hold from Valid SRD, RY IBY # High 
2,5 
0 
ns 


NOTES: 
1. Chip-Enable 
Controlled 
Writes: 
Write operations 
are driven 
by the valid combination 
of CE # and WE #. 
In systems 
where 


CE# 
defines 
the write 
pulsewidth 
(within a longer 
WE# 
timing 
waveform), 
all setup, 
hold and inactive 
WE# 
times 
should 
be 


measured 
relative 
to the CE# 
waveform. 


2. Sampled, 
not 100% 
tested. 
3. Refer to Table 
3 for valid AIN for byte write or block erasure. 
4. Refer to Table 
3 for valid DIN for byte write or block erasure. 
5. Byte write 
and block 
erase 
durations 
are measured 
to completion 
(SR.7 = 
1, RY/BY# 
= VOH). Vpp should 
be held at 


VPPH until determination 
of byte write/block 
erase success 
(SR.3/4/5 
= 0) 
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POWER-UP 
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(A) 
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WRITE 


WRITE BYTE WRITE OR 
VALID 
ADDRESS 
&; DATA (BYTE 
WRITE) 
AUTO~ATEO 
BYTE WRITE 


ERASE 
SETUP 
CO~~AND 
OR ERASE 
CONFIR~ 
CO~~AND 
OR ERASE 
DELAY 


PACKAGE 


E 
= STANDARD 
40 
LEAD 
TSOP 


F 
= REVERSE 
40 
LEAD 
TSOP 


PA = 44 
LEAD 
PSOP 


I 
I 
I 
I 
L ACCESS 
SPEED (ns) 
3.3V 
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Erase Suspend 
Flowchart 
Lowered 
VLKO from 2.2V 
to 2.0V 
Combined 
Vpp Standby 
Current and Vpp Read Current into One Vpp Standby 
Current Spec. 


with Two Test Conditions 
(DC Characteristics 
Table) 
Removed 
-250 
Speed Bin 


003 
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Ipps standby current specifications 
from ± 10 !LA to ± 15 !LA in DC Characteristics 
tables. 
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The 28FOO8SA FlashFile™ 
Memory is a very high 
performance 8 Mbit (8,388,608 bit) memory, organized 
as 1 Mbyte (1,048,576 bytes) of 8 bits each. The 
28FOO8SA contains sixteen 64 Kbyte (65,536 byte) 
blocks, each block separately eraseable and capable of 
100,000 byte write-block erase cycles. On-chip automa- 
tion dramatically 
simplifies software algorithms, and 
frees the system microprocessor to service higher prior- 
ity tasks during component data update. An enhanced 
system interface allows switching the 28FOO8SAinto a 
deep powerdown mode during periods of inactivity, and 
gives a hardware indication of the status of the internal 
Write State Machine. High-speed access time allows 
minimal wait-state interfacing to microprocessor buses, 
and advanced packaging provides optimum density! 
in2. 


Features of the 28FOO8SAinclude: 
• High-Density Symmetrically Blocked Architecture: 
- 
Sixteen 64 Kbyte Blocks 
• Extended Cycling Capability 
100,000 Block Erase Cycles 
1.6 Million Block Erase Cycles per Chip 


• Automatea t1yte wote ana tIIock hrase 


- 
Command User Interface 


- 
Status Register 
• System Performance Enhancements 
- 
RYIBY# 
Status Output 
- 
Erase Suspend Capability 


• Deep Powerdown Mode 
- 
0.20 !LA lee Typical 
• Very High Performance Read 
- 
85 ns Maximum Access Time 


• SRAM-Compatible Write Interface 
• Hardware Data Protection Features 
- 
EraselWrite 
Lockout during Power Transitions 


• Industry Standard Packaging 
- 
40 Lead TSOP, 44 Lead PSOP 


• ETOX III Nonvolatile Flash Memory 
Technology 
• 
- 
12V Byte WritelBlock Erase 


The Future, 
Using 
Flash 
Memory 


292094-1 


Traditional 
system architectures 
combine slow, high 
density nonvolatile mass storage (such as a disk drive) 
and fast, volatile memory (such as DRAM) to fully 
address system requirements. As Figure I illustrates, 
flash memory combines the best features of both the 
above memory technologies, making a "diskIDRAM" 
approach to system architecture unnecessary and ulti- 
mately wasteful. Flash memory is rapidly approaching 
DRAM 
in both cost and performance (especially in 
cached systems), while adding capabilities (such as non- 
volatility), that DRAM cannot claim. The 28FOO8SA 
will be the building block memory of choice for emerg- 
ing computing markets, whether integrated in a memo- 
ry card or disk drive form factor, or resident on the 
system motherboard. 


This application note discusses hardware interfacing of 
the 28FOO8SAflash memory to system designs. The 
28FOO8SAdatasheet (order number 290429) is a valu- 
able reference document, 
providing in-depth 
device 
technical specifications, package pinouts and timing 
waveforms. Additionally, companion application note 
AP-360, "28FOO8SASoftware Drivers" (order number 
292095) provides example ASM-86 and "C" routines 
for controlling the 28FOO8SA.AP-364 "28FOO8SAAu- 
tomation and Algorithms" discusses in-depth operation 
of the 28FOO8SAWrite State Machine and internal al- 
gorithms, emphasizing how they interface to system 
software and hardware. AP-360 and AP-364 should be 
reviewed in conjunction with this application note and 
the 28FOO8SAdatasheet for a complete understanding 
of this device. 


Figure 2 shows a block diagram of the 28FOO8SAand 
its internal contents. The CE# (chip enable) and OE# 
(output 
enable) inputs have comparable enable and 


read functions to those of other memory technologies 
such as SRAM. Similarly, Vcc is the component power 
supply (5V ± 10%), while GND should be connected 
to system ground. Address inputs allow the system to 
select a specific byte for reading or writing! erasing, and 
the 8-bit data bus transfers information to and from the 
28FOO8SA. The 
other 
control 
lines (WE # , RP#, 


RY/BY# 
and Vpp) are discussed below. 


2.1 
Vpp (Byte Write/Block Erase 
Voltage) 


The Vpp input supplies high voltage to the 28FOO8SA 
to enable byte write and block erase. Vpp is specified at 
12V ± 5% (ll.4V -12.6V). Attempting to byte write or 
block erase the 28FOO8SAbeyond the 5% 12V toler- 
ance is not recommended. Vpp above 12.6V can poten- 
tially result in device damage, and Vpp below 11.4V 
dramatically lengthens write/erase 
time and compro- 


mises data reliability. The 28FOO8SAis guaranteed to 
prevent byte write and block erase attempts with Vpp 
below 6.5V, and in this situation it reports a "low Vpp 
error" 
through 
the component 
Status Register (see 


AP-360, AP-364 or the 28FOO8SAdatasheet). 


intel~ 


12V is often already present in systems, used to power 
the hard drive, display, RS-232 circuitry, flash BIOS 
update, etc. If it meets the tolerance and current capa- 
bility requirements of the 28FOO8SA,such a power sup- 
ply could be used directly as the 28FOO8SA update 
voltage source. However, 12V is sometimes not present 
or otherwise required, and in such cases, the 28FOO8SA 
Vpp must be derived from existing voltages and sup- 
plies. 


Fortunately, 
flash memory's rapidly increasing popu- 


larity has driven ever-improving 12V converter avail- 
ability in the market. These solutions derive a regulated 
12V from a wide range of input voltages, and offer var- 
ied levels of integration and current delivery capability. 
In general, the input for 12V converters should come 
from the unregulated system power source, particularly 
in battery-powered systems. 


Table I lists and briefly describes several 12V genera- 
tion solutions available at the time this document was 
published. This is by no means an exhaustive list, and 
does not reflect any specific recommendation by Intel 
Corporation. For in-depth information on power sup- 
ply solutions for flash memory, reference Intel applica- 
tion note AP-357 (order number 292092), available 
through your local Intel sales office or distributor. 


Once 12V is available in the system, how is it con- 
trolled? One approach is to hard-wire 12V from the 
supply directly to the Vpp inputs of each 28FOO8SAin 
the system. The advantage here is in design simplicity 
and board space savings. The 28FOO8SA Command 
User Interface architecture and two-step byte write/ 
block erase command 
sequences provide protection 


from unwanted data alteration even with high voltage 
present on Vpp. All 28FOO8SAfunctions are disabled 
with Vcc below lockout voltage VLKO(2.2V), or when 


RP# 
is at VIL (see section 2.3). This provides data 


protection during system powerup, when the minimal- 
ly-loaded Vpp supply often ramps to 12V before Vcc 
(and therefore control inputs to the device) are stable. 


For additional data protection, the system designer can 
choose to make the Vpp supply switchable via a GPIO 
(General Purpose Input/Output) 
line, enabling 12V to 


the 28FOO8SAonly during byte write or block erase 
attempts. A switchable Vpp also minimizes power con- 
sumption by both the flash memory components and 
the 12V supply or converter (due to efficiency losses). 
Many 12V converters integrate an ENABLE 
input, 


eliminating external circuitry. If such an input is not 
available, 
a 
low drain-source 
resistance 
MOSFET 


switch such as the Motorola MTD4P05 can be used at 
the 12V supply output. An example schematic for this 
switch is shown in Figure 3. The calculations below 
show that 
the 
low drain-source 
resistmce 
of the 


MTD4P05 will keep a 12V input within the 5% toler- 
ance required by the 28FOO8SA. 


RDS = 0.60 


Ipp = 60 mA 
(worst case, two components being byte written or 
block erased) 


AVSWITCH DROP = (60 mA 
x 
0.60) 
= 0.04V 


10K 


GPIO 


Part 
Input 
Current 
Total 
Est. 


Manufacturer 
Number 
(V) 
Package 
Output 
Components 
Cost 


Needed 
(10K) 


Maxim 
MAX732 
4 to 7.5 
16S0lC 
120 mA 
9 
$3.93 


Linear Technology 
LT1110-12 
4.5 to 5.5 
S08 
120 mA 
11 
$4.58 


Linear Technology 
LT1109-12 
4.5 to 5.5 
S08 
60mA 
8 
$3.61 


Motorola 
MC34063A 
4.5 to 5.5 
S08 
120 mA 
15 
$2.25 


Maxim 
MAX667 
12.1 to 16.5 
S08 
120 mA 
4 
$2.63 


Linear Technology 
LT1111-12 
16 to 30 
S08 
120 mA 
7 
$3.95 


National 
Semiconductor 
LM2940CT-12 
13 to 26 
TO-220 
1A 
3 
$1.30 


td! 28'flUulS::lA 
oUers sunilar automated byte write/ 
block erase capabilities 
to those first seen in the 
28FOOIBX Bootblock flash memory family, introduced 
by Intel in May of 1991. It enhances these capabilities 
via the RY/BY# 
output, which provides hardware in- 
dication of internal Write State Machine (WSM) opera- 
tion. RY/BY# 
is a full CMOS output, constantly driv- 
en by the 28FOO8SA and not tristated if the device 
CE# 
or OE# 
inputs are brought to VIH. RY/BY#'s 
default state after device powerup is V0"' It transitions 
low to VOL when a byte write or block erase sequence 
is initiated by system software, and RY/BY # 's rising 
edge (return to V0H> alerts the system to byte write or 
block erase completion. RY/BY # also goes to VOH 
after the 28FOO8SAis put in Erase Suspend or Deep 
Powerdown modes. 


RY/BY# 
is intended to interface the 28FOO8SAto a 
system microprocessor rising-edge-triggered interrupt 
input. 
In 
a multiple-chip 
memory 
array, 
external 
EPLD logic or an interrupt controller can be used to 
combine and prioritize RY/BY # s into one system in- 
terrupt (see Figure 4). The system can then, using a 
flash memory "activity table" set up in RAM, poll the 
individual 
28FOO8SA Status Registers to determine 
which 
device has 
returned 
"ready", 
or 
read 
the 
RY/BY # inputs directly at the EPLD, as shown. 


Figure 5 provides an alternative method for connecting 
multiple RY/BY#s 
to one interrupt input. The diode/ 
resistor 
combination 
converts 
the 
28FOO8SA full 
CMOS output into an open-drain "wired-OR" equiva- 
lent. Any RY/BY # at VOL will drive the interrupt 
input low, and this input is pulled high by the resistors 
when all RY/BY#s 
are at VOH. It is important in a 
design like this to use diodes with low forward voltage 
drops, so that the 28FOO8SAVOL (O.45Y)plus the di- 
ode voltage drop is still less than or equal to the desti- 
nation input VIH (O.8Y). For the schematic shown in 
Figure 5, the equation is: 


Note that should the system connect RY/BY# 
to an 
interrupt, 
disable that interrupt 
prior to suspending 
erase, as RY/BY # will transition to VOH when the 
device is suspended. 


•I 
28F008SA 


RY/BY# 


•I 
28F008SA 


RY/BY# 


The RP# 
input, when driven to VIL by the system, 
switches the 28FOO8SAinto a deep powerdown mode 
with negligable power consumption. This feature inte- 
grates the Vcc power PET often used with low power 
designs. Power consumption 
thru 
Vcc is typically 
1 P.W in deep powerdown mode. RP # -low deselects 
the memory, places output drivers for DO-7 in a high- 
irnpedence state and turns off a majority of internal 
circuits. RY/BY # is driven to VOH while in deep 
powerdown mode. Depending on the flexibility desired, 
system designers can choose to put either the entire 
flash device array into deep powerdown mode, or any 
individual components via selective input control. The 
28FOO8SArequires a "wakeup" 
time after RP II re- 
turns 
to VIH before it can be successfully written 
(tPHWU or outputs are valid to read attempts (tPHQV). 


Since RP# 
= VIL deselects the 28FOO8SA,this input 


can be used not only as a means of entering deep pow- 
erdown mode but also as an active-high "chip enable" 
to block spurious writes during system power tran- 
sitions. Figure 6 shows one possible RP # implementa- 
tion, controlled by a GPIO line for power management 
and by a system POWER GOOD for power sequencing 
protection. In this design, the 5V monitoring circuit 
begins functioning at Vcc = IV, and will enable the 
device only after Vcc transitions above 4.6V (and sys- 
tem control signals are therefore stable). As Vcc drops 
below 4.6V during system powerdown, RP# protection 
is again activated. 


RP# 
at VIL resets all internal automation within the 


28FOO8SA as part of the deep powerdown process. 
Upon exit from deep powerdown, the 28FOO8SAis re- 
set to Read Array mode. This functionality is ideal 
when the 28FOO8SAis the boot memory for the system. 
RP# 
active transitions reset the Write Status Machine 


if system reset occurs during flash memory program or 
erase, and allow successful CPU reboot. 


When flash memory is written, the result can range 
from a 28FOO8SA that is placed in "read intelligent 
identifier" or "read Status Register" modes to altera- 
tion of nonvolatile 
flash memory 
contents. 
System 


hardware can prevent spurious writes to flash memory 
by application software or an operating system by gat- 
ing the system WE# 
to flash memory components to 


enable writes only when desired. 


Figure 7 shows a simple design that gates WE# with a 
GPIO line, enabling writes to the 28FOO8SAonly when 
the GPIO is a "0". The GPIO is initialized to "I" on 
system powerup and the BIOS, a dedicated update soft- 
ware routine, a special keyboard sequence, switch on 
the back of the system or jumper on the system mother- 
board can then control the GPIO. This circuit ensures 
that 
flash memory 
contents 
are as permanent 
as 


"ROM" unless alteration is specifically desired. 


WR#(FROM 
SYSTEM) =D- WE#(ro 
28F008SA) 


GPIO 


292094-7 


Figure 8 shows an 8 Mbyte flash memory array using 
TSOP (Thin Small Outiine)-packaged 
28FOO8SAs in 


standard (E) and reverse (F) configurations. A layout 
like this is used in Intel's Series 2 flash m,:mory cards 
(in densities to 20 Mbytes) and provides optimum array 
density for available board space. 


Address and data lines are connected to all components 
in parallel. OE# 
and WE# 
are similarly connected. 


Section 2.7 of this document discusses alternate meth- 
ods of implementing these signals for highest speed 
reads and writes in large memory arrays . 


Component RY/BY # s are shown as not connected in 
Figure 8. They can be left unused, in which case the 
system software will substitute polling of component 
Status Registers for hardware interrupt, or RY/BY # s 
can be implemented as described in section 2.2. 


CE#s are also not connected, intended to be individu- 
ally driven by system chip enable decoding logic. This 
provides capability to read from and write to the array 
on a byte-by-byte basis. In a xl6-only system, upper 
and lower byte 28FOO8SAscan have their CE#s bused 
together if desired. 


Finally, Vcc, Vpp and RP# 
are connected in parallel 


to all components. Section 2.6 discusses bypass capaci- 
tor filtering of supply voltage inputs, while section 2.3 
provides uses for RP #. If desired, individual compo- 
nent, component pair, etc. selective powerdown control 
can be substituted 
for the global control shown in 


Figure 8. 


In space-constrained designs, a multiple-layer partial 
"serpentine" trace layout at the edges of the 28FOO8SA 
array may be implemented, with a full serpentine lay- 
out within the array as in Figure 8. 


• 


VSQOO.:lQZ.:l 
VSQOO.:lQZ3 
0 
0 
0 


E2SFOOSSA 
F2SFOOSSA 


VSQOO.:lQZ.:l 
VSQOO.:lQZ3 
0 
0 
0 


E2SFOOSSA 
F2SFOOSSA 


Both the VCC and Vpp inputs to each 28FOO8SA 
should be decoupled at the package leads to provide 
noise immunity and supply current for transient cur- 
rent spikes during read, byte write and block erase. Ad- 
ditional bulk capacitance for groups of flash memories 
overcomes voltage slump caused by PC board trace in- 
ductances. Calculations for individual component and 
bulk capacitors (one per 8 devices) are shown below. 


I = 
35 mA per device (Ved. therefore 


I = 
17.5 mA per device input (Vcc) 


I = 
30 mA per device (Vpp) 


dv = 
0.1V (0.2V peak-peak) 


dt=20ns 


Basic Equation: 


1= 
C dv/dt 
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NOTE: 
Calculations 
above assume that 
each 28F008SA is 
driving CMOS inputs (with corresponding 
high im- 


pedance and negligible input current requirements). If 
28F008SA 
outputs 
are driving 
non-CMOS 
inputs, 


larger per-component 
capacitance may be needed to 


supply current while outputs are switching. 


Bulk Capacitor(4 Mbytearray) = 10 x (e x 0.01 ,...FJ 
= O.e,...F 


Per-Component Decoupling Capacitor (Vpp): 


C = I dtldv = (30 mA x 20 ns)/O.1V = 6 nF 


The 28F008SA's fast read access and command write 
specifications make it a natural choice for high per- 
formance memory arrays. The following tips will opti- 
mize the memory interface for optimum read/write 
speed. The common recommendation in all instances 
centers around minimizing fanout and capacitive bus 
loading to allow highest switching speed, lowest rise 
and fall times, and therefore greatest performance. 


AP-357 
AP-360 
AP-364 
ER-27 
ER-28 


28F008SA 
Datasheet 
28F008SA-L 
Datasheet 


"Power 
Supply Solutions 
for Flash Memory" 


"28F008SA 
Software 
Drivers" 


"28F008SA 
Automation 
and Algorithms" 


"The 
Intel 28F008SA 
Flash Memory" 


"ETOX-1I1 Flash Memory Technology" 


• Minimize address bus loading from the microproc- 


essor to the memory array. Multiple address latches 
feeding subsets of the array speed address input to 
each 28F008SA and CE# decoding by ~,xtemallog- 
ic. 


• Similarly, drive the memory array with multiple 


OE#s 
and WE#s. 
Most EPLD and d'screte logic 


timing is specified at a 30 pF load, whic.~equates to 
driving 4 28F008SA inputs at maximum input ca- 
pacitance. Anything more than this may severely 
impact the logic's propagation delay. 


• Finally, remember that each 28F008SA, when read, 


drives not only the system microprocessor or trans- 
ceiver but also any other flash memory components 
connected to the common data bus. Each 28F008SA 
data output is specified at 12 pF, and th~:28F008SA 
read timings are tested at either 30 pF or 100 pF of 
loading, depending on the chosen speed bin. 


For large flash arrays where sequential data can be dis- 
tributed on many devices, hardware interleaving pro- 
vides additional performance. 


Appendix 
A shows hardware 
interface 
to the 
In- 


te1386TMSLPI bus, and Appendix B shows interface to 
the Intel486TMSX local CPU bus. Both interfaces in- 
corporate techniques described il1 sections 2.1- 2.7 of 
this document. These designs are intended to be exam- 
ples which can be modified to suit requirements of the 
end system. 


Order Number 
290429 
290435 
292092 
292095 
292099 
294011 
294012 


Silo-I.- 
LA17-20 


LATCH 


SBHE* 


PSTART* 


80386Sl 
PCMOO 


PM/IO* 


PW/R* 


rLSHDCS* 


PROY* 


VGACS- 


SOo-15 


CSLO\ 


CSH*l 


•••••••••• 
1.................. 


:: 
Vpp 
............ 
• , 
WE- 


RY/BY* 


000-7 


NOTE: 
The DRAM 
interface 
is not shown, 
for graphic 
simplicity. 


12V 


Vpp ; *..-L.rr- GPIO 


Switcn t __ ~~ 
RESET- 


APPENDIX 
B 
Intel486™ SX LOCAL CPU BUS INTERFACE 


eLK 


D/Ctl 


Int,14S6I'11SX W/Rtl 


MilO. 


12V 


VPP~\-~~GPIO 
. 
I 
~ 
SWitch ~ 
~ 
RESEr- 


•••• 
: Vpp 


NOTE: 
The DRAM 
interface 
is not shown, 
for graphic 
simplicity. 


Number 
Description 


-003 
Renamed 
PWD# 
as RP# 
to match JEDEC conventions. 
Updated 
Figure 6 
Added Reset Control discussion 
for RP# 
(ResetiPowerdown) 
Input. 
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28F008SA Software Drivers 


CONTENTS 
PAGE 
CONTENTS 
PAGE 


1.0 INTRODUCTION 
3-118 
ADDITIONAL 
INFORMATION 
3-137 


2.0 ASM86 ASSEMBLY 
DRIVERS 
3-119 


3.0 "C" DRIVERS 
3-123 


• 


This application note provides example software code 
for byte writing, block erasing and otherwise control- 
ling Intel's 28FOO8SA 8 Mbit symmetrically blocked 
FlashFile™ 
Memory family. Two programming lan- 


guages are provided; high-level "C" for multi-platform 
support, and ASM-86 assembly. In many cases, the 
driver routines can be inserted "as is" into the main 
body of code being developed by the system software 
engineer. The text accompanying each routine describes 
the existing code and suggests area for possible altera- 
tion to fit specific applications. These explanations. 
along with in-line commenting, minimize driver modifi- 
cation efforts. 


28FOO8SA-Lare valuable reference documents. Data- 
sheets should be reviewed in conjunction with this ap- 
plication note for a complete understanding of the de- 
vices. AP-359, "28FOO8SA Hardware Interfacing" 
is 


the hardware-oriented 
application note equivalent for 


these devices and can also be referenced. 
AP-364 


"28FOO8SA Automation 
and 
Algorithms", 
another 


useful reference, discusses the details of Write State ma- 
chine automation. 


The internal automation of the 28FOO8SAmakes soft- 
ware timing loops unnecessary and results in platform- 
independent code. This software is designed to be exe- 
cuted in any type of memory and with all processor 
clock rates. "C" code can be used with many micro- 
processors and microcontrollers, while ASM-86 assem- 
bly code provides the smallest code "kernal" for Intel 
microprocessors and embedded processors. 
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The 
following 
oode 
oontrols 
byte 
write 
of data 
to 
a single 
28F008SA 
(x8 write) 
DS:[Sll 
points 
to 
the 
data 
to 
be 
written. 
ES:[DIl 
is the 
looation 
to 
be written 
In protected 
mode 
operation, 
DS 
and 
ES 
reference 
a descriptor 
Register 
AX 
is modified 
by 
this 
procedure 
WRITE_SETUP 
EQU 
40H 
READ_ID 
EQU 
90H 
INTEL_ID 
EQU 
89H 
DEVICE_ID 
EQU 
OA2H 
DEVICE_ID2 
EQU 
OAIH 
READY 
EQU 
80H 
W_ERR_FLAG 
EQU 
IOH 
VPP_FLAG 
EQU 
08H 
Insert 
oode 
here 
to 
ramp 
Vpp 
and 
disable 
component 
RP# 
input. 
If a string 
of bytes 
is 


to 
be written 
at 
one 
time, 
Vpp 
ramp 
to 
12V 
and 
ID 
check 
need 
only 
occur 
once 


before 
the 
first 
byte 
is written 
MOV 
AX. 
"Address 
0 for 
target 
28F008SA-segment" 
; Initialize 
pointer 
to 
28F0008SA 
address 
0 


MOV 
MOV 
MOV 
MOV 
MOV 
W_BYT_LOOP: 
TEST 
JZ 


ES. 
AX 
DI. 
"Address 
BYTE 
PTR 
ES:[DIl. 
BYTE 
PTR 
ES:[DIl. 


W_BYT_ID_ERR 
Dl, 
-Address 


BYTE 
PTR 
ES: [DIl • 
W_BYT_ID_PASS 
BYTE 
PTR 
ES:[DIl. 
W_BYT_ID_ERR 


o for 
target 
28F008SA-offset" 
READ_ID 
Wri te 
Intel1gent 
Identifier 
oommand 
INTEL_ID 
; Does 
manufacturer 
ID 
read 
correctly? 


I for 
target 
28F008SA-otfset" 
Initialize 
pointer 
to 
28F008SA 
address 
I 


DEVICE_ID 
; Does 
devioe 
ID read 
oorrectly? 


ES. 
DI. 
BYTE 
PTR 
AL. 
ES:[DIl. 


BYTE 
PTR 
ES: [DI], 


W_BYT_LOOP 


AX 
-Byte write 
destination 
address-otfset- 
ES:[DIl. 
WRITE_SETUP 
Write 
byte 
write 
setup 
oommand 
DS:[Sll 
Load 
AL 
with 
data 
to 
write 
AL 
Wri te 
to device 


This routine writes a byte of data to a single 28FOO8SA.Note the use of BYTE PTR notation to force x8 accesses. If 
a string of bytes is to be written at one time. the Vpp ramp up, RP# disable and device ID checks need only be done 
before the first byte write attempt. Additionally. when writing multiple bytes at once, examination of bits other than 
bit 7 (WSM Status) need only occur after the last byte write has completed. The Status Register retains any error bits 
until the Clear Status Register command is written. 


The 
following 
code 
controls 
byte 
write 
of 
data 
to 
a pair 
of 28F008SAs 
(xlS write) 


DS'(SIl 
points 
to 
the 
data 
to 
be written, 
ES:(DIl 
is the 
location 
to 
be written 
In protected 
mode 
operation, 
DS 
and 
ES 
reference 
a descriptor 


Register 
AX 
is modified 
by 
this 
procedure 


WRITE_SETUP 
EQU 
40H 
READ_ID 
EQU 
90H 
INTEL_ID 
EQU 
89H 


DEVICE_ID 
EQU 
OA2H 
DEVICE_ID2 
EQU 
OAIH 


READY 
EQU 
80H 
W_ERR_FLAG 
EQU 
lOH 
VPP_FLAG 
EQU 
08H 


. Insert 
code 
here 
to 
ramp 
Vpp 
and 
disable 
component 
RP# 
inputs. 
If a string 
of words 
is 
to be written 
at 
one 
time, 
Vpp 
ramp 
to 
12V 
and 
ID check 
need 
only 
occur 
once, 
before 
the 
first 
word 
is written 


MOV 
AX, 
'Address 
0 for 
target 
28F008SA-segment' 
; Initialize 
pointer 
to 
28F008SA 
address 
0 
ES, 
DI, 
ES:(DIl, 


AX 
'Address 
0 for 
target 
28F008SA-offset' 


((READ_ID 
SHL 
8) 
OR READ_ID) 


; Write 
Inteligent 
Identifier 
command 


((INTEL_ID 
SHL 
8) 
OR 
INTEL_ID) 
; Does 
manufacturer 
ID read 
correctly? 
JNZ 
W_WRD_ID_ERR 
MOV 
DI, 
'Address 
1 for 
target 
28F008SA-offset' 
; Initialize 
pointer 
to 28F008SA 
address 
1 
CMP 
ES, (DIl, 
«DEVICE_ID 
SHL 
8) 
OR DEVICE_ID) 
Does device 
ID read correctly? 


JZ 
W_WRD_ID_PASS 


ClIP 
ES: (DIl, 
«(DEVICE_ID2 
SHL 
8) 
OR DEVICE_ID2) 
JNZ 
W_WRD_ID_ERR 


MOV 
MOV 
MOV 
MOV 
MOV 
W_WRD_LOOP, 
TEST 
JZ 


MOV 
TEST 
JNZ 
TEST 
JNZ 


TEST 
JNZ 
TEST 
JNZ 


ES, 
DI, 
ES, (DI], 
AX, 
ES,(DIl, 


AX 
-Byte write 
destination 
address-offset- 


«WRITE_SETUP 
SHL 
8) 
OR WRITE_SETUP) 
; Write 
byte 
write 
setup 
command 


DS,(SIl 
Load 
AX 
with 
data 
to 
write 
AX 
; Write 
to 
devices 


AX, 
ES:(DIl 
Load 
Status 
Register 
data 
into 
AX 


AL, 
W_ERR_FLAG 
Check 
Status 
Register 
bit 
4 
(low 
byte) 


W_WRD_ERR 
Jump 
if = 1 


AH, 
W_ERR_FLAG 
Check 
Status 
Register 
bit 
4 
(high 
byte) 


W_WRD_ERR 
Jump 
if = 1 


AL, 
VPP_FLAG 
Check 
Status 
Register 
bit 
3 
(low byte) 


W_WRD_VPP 
Jump 
if = 1 
AH, 
VPP_FLAG 
Check 
Status 
Register 
bit 
3 
(high 
byte) 


W_WRD_VPP 
Jump 
if = 1 


W_WRD_ID_ERR 
: 


Insert 
code to 
service 
improper device 
ID read error here. 


Are 
28F008SA 
RP# 
inputs 
disabled? 
Is Vcc 
applied 
to 
the 
28F008SAs? 


W_WRD_ERR: 


Insert 
code to service 
byte write 
error here 
W_WRD_VPP: 


Insert 
code to service 
byte write 
Vpp low error 
here 


W_WRD_CONT: 
Code continues 
trom this 
point .•... 


This routine 
writes a word of data to a pair of 28FOO8SAs. Note that all constants 
have been "OR'd" 
for parallel 


read/write 
of two devices at once. If a string of words is to be written at one time, the Vpp ramp up, RP# 
disable 
and device ID checks need only be done before the first word write attempt. 
Additionally, 
when writing multiple 
words at once, examination 
of bits other than bit 7 (WSM Status) need only occur after the last word write has 
completed. 
The Status Register retains any error bits until the Clear Status Register command 
is written. 
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The 
following 
code 
controls 
block 
erase 
of a 
single 
28F008SA 
(x8 block 
erase) 
ES: [DI1 
points 
to the 
block 
to be erased 
In protected 
mode 
operation, 
ES 
references 
a descriptor 
Register 
AX 
is modified 
by this 
procedure 
ERASE_SETUP 
EQU 
20H 
ERASE_CONFIRM 
EQU 
ODOH 
READ_ID 
EQU 
90H 
INTEL_ID 
EQU 
89H 
DEVICE_ID 
EQU 
OA2H 
DEVICE_ID2 
EQU 
OA1H 
READY 
EQU 
80H 
E_ERR_FLAG 
EQU 
20H 
E_CIID_FLAG 
EQU 
30H 
VPP_FLAG 
EQU 
08H 
Insert 
code 
here 
to 
ramp 
Vpp 
and 
disable 
component 
RP# 
input. 
If a string 
of 
blocks 
is 


to 
be 
erased 
at 
one 
time, 
Vpp 
ramp 
to 
12V 
and 
10 
check 
need 
only 
occur 
once, 


before 
the 
first 
block 
is erased 
MOV 
AX. 
'Address 
0 for 
target 
28F008SA-segment' 
; Initialize 
pointer 
to 28F008SA 
address 
0 


ES. 
AX 
DI, 
"Address 
BYTE 
PTR 
ES:[DI1. 
BYTE 
PTR 
ES:[DI1. 
E_BYT_ID_ERR 
01, 
-Address 
1 for 
target 
28F008SA-offset' 
Initialize 
pointer 
to 28F008SA 
address 
1 
DEVICE_ID 
; Does 
device 
ID read 
correctly? 


o 
for target 
28F008SA-offset' 
READ_ID 
Write 
Inteligent 
Identifier 
command 
INTEL_ID 
; Does 
manufacturer 
ID 
read 
correctly? 


BYTE 
PTR 
ES: [DI1 • 
E_BYT_ID_PASS 
BYTE 
PTR 
ES:[DI1. 
E_BYT _ID_ERR 


MOV 
MOV 
MOV 
MOV 
E_BYT_LOOP: 
TEST 
JZ 


ES. 
AX 
Dl, 
"Block erase 
destination 
address-offset" 
BYTE 
PTR 
ES:[DI1. 
ERASE_SETUP 
Write 
block 
erase 
setup 
command 
BYTE 
PTR 
ES:[DI1. 
ERASE_CONFIRM 
; Write 
block 
erase 
confirm 
command 


E_CMD_FLAG 
Check 
Status 
Register 
bits 
4 and 
5 
Jump 
if = 1 


E_ERR_FLAG 
Check 
Status 
Register 
bit 
5 
Jump 
if = 1 


VPP_FLAG 
Check 
Status 
Register 
bit 
3 
Jump 
if = 1 


E_BYT_ID_ERR 
: 
Insert 
code to service 
improper device 
ID read error here. 
Is 28F008SA 
RP# 
input 
disabled? 
Is Vcc 
applied 
to the 
28F008SA? 
E_BYT_CIID_ERR: 
Insert 
code to 
service 
block 
erase 
commandsequence 
error 
here 
(setup 
tollowed 
by 
8 command 
other 
than 
confirm) 
E_BYT_ERR: 
Insert 
code to service 
block erase 
error here 
E_BYT_VPP: 
Insert 
code to service 
block 
erase 
Vpp low error here 
E_BYT_CONT: 
Code continues 
trom this 
point ••••. 


This routine erases a block of a single 28FOOSA.Note the use of BYTE PTR notation to force x8 accesses. If a string 
of blocks is to be erased at one time, the Vpp ramp up, RP# disable and device ID checks need only be down before 
the frrst block erase attempt. Additionally, when erasing multiple blocks at once. examination of bits other than bit 7 
(WSM Status) need only occur after the last block erase has completed. The Status Register retains any error bits 
until the Clear Status Register command is written. 


intel~ 


The 
tollowing 
code 
controls 
block 
erase 
at a pair 
at 28F008SAs 
(x16 block 
erase) 
ES: [DIl points 
to the 
blocks 
to be 
erased 
In protected 
mode operation, 
ES references 
a descriptor 
Register 
AX 
is moditied 
by this 
procedure 
ERASE_SETUP 
EQU 
20H 
ERASE_CONFIRM 
EQU 
ODOH 
READ_ID 
EQU 
90H 
INTEL_ID 
EQU 
89H 
DEVICE_ID 
EQU 
OA2H 
DEVICE_ID2 
EQU 
OAIH 
READY 
EQU 
80H 
E_ERR_FLAG 
EQU 
20H 
E_CMD_FLAG 
EQU 
30H 
VPP_FLAG 
EQU 
08H 
Insert 
code 
here 
to ramp 
Vpp 
and 
disable 
component 
RP# 
inputs. 
It a string 
at blocks 
is 
to be erased 
at 
one 
time. 
v.pp 
ramp 
to 
12V 
and 
ID check 
need 
only 
occur 
once, 
betore 
the 
tirst 
block 
pair 
is erased 
MOV 
AX, 
-Address 
0 tor 
target 
28F008SA-segment- 
; Initialize 
pointer 
to 28F008SA 
address 
0 
ES, 
DI, 
ES: [DI], 


AX 
-Address 
0 tor 
target 
28F008SA-ottset- 
«READ_ID 
SHL 
8) OR READ_ID) 
; Write 
Intel1gent 
Identifier 
command 
«INTEL_ID 
SHL 
8) OR 
INTEL_ID) 
; Does 
manufacturer 
ID read 
correctly? 
JNZ 
E_WRD_ID_ERR 
MOV 
DI. 
-Address 
1 tor target 
28F008SA-ottset- 
; Initialize 
pointer 
to 28F008SA 
address 
1 
CMf 
ES: [DI1, 
«DEVICE_ID 
SHL 8) 
OR DEVICE_ID) 
Does device 
ID read correctly? 
JZ 
E_WRD_ID_PASS 
CMf 
ES: [DIl , 
«DEVICE_ID2 
SHL 8) 
OR DEVICE_ID2) 
JNZ 
E_WRD_ID_ERR 


E_WRD_LOOP: 
TEST 
JZ 


MOV 
TEST 
JNZ 
TEST 
JNZ 


TEST 
JNZ 
TEST 
JNZ 


TEST 
JNZ 
TEST 
JNZ 


ES. 
DI. 
ES:[DI1. 


ES: [DI], 


AX 
-Block 
erase 
destination 
address-offset· 
«ERASE_SETUP 
SHL 
8) OR ERASE_SETUP) 
Write 
block 
erase 
setup 
command 
«ERASE_CONFIRM 
SHL 
8) OR ERASE_CONFIRM) 
; Write 
block 
erase 
confirm 
command 


AX. 
ES:[DIl 
Load 
Status 
Register 
data 
into 
AX 
AL. 
E_CMD_FLAG 
Check 
Status 
Reg 
bits 
4 and 
5 
(low byte) 


E_WRD_CMD_ERR 
Jump 
it = 1 
AH. 
E_CMD_FLAG 
Check 
Status 
Register 
bits 
4 and 
5 
(high 
byte) 
E_WRD_CMD_ERR 
Jump 
it = 1 


AL. 
E_ERR_FLAG 
Check 
Status 
Register 
bit 
5 
(low byte) 
E_WRD_ERR 
Jump 
it = 1 
AH. 
E_ERR_FLAG 
Check 
Status 
Register 
bit 
5 
(high 
byte) 


E_WRD_ERR 
Jump 
it = 1 


AL. 
VPP_FLAG 
Check 
Status 
Register 
bit 
3 
(low byte) 
E_WRD_VPP 
Jump 
it = 1 
AH, 
VPP_FLAG 
Check 
Status 
Register 
bit 
3 
(high 
byte) 


E_WRD_VPP 
Jump 
it = 1 


E_WRD_ID_ERR 
: 
Insert 
code to 
service 
improper device 
ID read error 
here. 
Are 
28F008SA 
RP# 
inputs 
disabled? 
Is Vcc 
applied 
to the 
28F008SAs? 
E_WRD_CMD_ERR 
: 
Insert 
code to 
service 
block 
erase 
commandsequence 
error 
here 
(setup 
tollowed 
by a command 
other 
than 
contirm) 
E_WRD_ERR: 
Insert 
code to service 
block erase 
error here 
E_WRD_VPP: 
Insert 
code to 
service 
block 
erase 
Vpp low error 
here 
E_WRD_CONT: 
Code continues 
trom this 
point ..... 


This routine erases a block pair of two 28FOO8SAs.Note that all constants have been "OR'd" for parallel read/write 
of two devices at once. If a string of block pairs is to be erased at one time, the Vpp ramp up, RP *' disabl e and device 
ID checks need only be done before the first block pair erase attempt. Additionally, when erasing multiple block 
pairs at once, examination of bits other than bit 7 (WSM Status) need only occur after the last block pair erase has 
completed. The Status Register retains any error bits until the Clear Status Register command is written. 


,* 
*' 


" 
Copyright 
Intel 
Corporation, 
1992 
" 


" 
Brian 
Dipert, 
Intel 
Corporation, 
May 
7, 
1992, 
Revision 
2.1 
" 
" 
The 
tollowing 
drivers 
control 
the 
Command 
and 
Status 
Registers 
ot the 
28F008SA 
Flash 
" 
'* 
Memory 
to 
drive 
byte 
write. 
block 
erase, 
Status 
Register 
read 
and 
clear 
and 
*' 
" 
array 
read 
algorithms. 
Sample 
Vpp 
and 
RP# 
control 
blocks 
are 
also 
included, 
" 


" 
as 
are 
example 
programs 
combining 
drivers 
into 
tull 
algorithms 
" 
" 
The 
tunctions 
listed 
below 
are 
included: 
" 
" 
erasbgn (): Begins 
block 
erasure 
" 
" 
erassusp(): 
Suspends 
block 
erase 
to 
allow 
reading 
data 
trom 
a block 
ot the 
" 
" 
28F008SA 
other 
than 
that 
being 
erased 
" 
" 
erasres(): 
Resumes 
block 
erase 
it 
suspended 
" 
" 
end (): Polls 
the 
Write 
State 
Machine 
to 
determine 
it block 
erase 
or byte 
writ., 
" 
" 
have 
completed 
" 
1* 
eraschk (): Executes 
tull 
status 
check 
atter 
block 
erase 
completion 
" 
" 
writebgn(): 
Begins 
byte 
write 
" 
" 
writechk(): 
Executes 
tull 
status 
check 
atter 
byte 
write 
completion 
" 
" 
idread(): 
Reads 
and 
returns 
the 
manutacturer 
and 
device 
IDs 
ot the 
target 
" 
,'28F008SA 
" 
" 
statrd(): 
Reads 
and 
returns 
the 
contents 
ot the 
Status 
Register 
" 
" 
statclr(): 
Clears 
the 
Status 
Register 
" 
" 
rdmode 
(): Puts 
the 
28F008SA 
in Read 
Array 
mode 
" 
" 
rdbyte 
(): Reads 
and 
returns 
a specitied 
byte 
trom 
the 
target 
28F008SA 
" 
" 
vppup(): 
Enables 
high 
voltage 
Vpph 
" 
" 
VppdOWD(): 
Disables 
Vpph 
" 
" 
pwden(): 
Enables 
active 
low 
signal 
RP# 
" 


" 
pwddis(): 
Disables 
active 
low 
signal 
RP# 
" 


" 
" 
" 
Addresses 
are 
transterred 
to 
tunctions 
as 
pointers 
to 
tar 
bytes 
(ie long 
integers). 
An 
" 
" 
alternate 
approach 
is to 
create 
a global 
array 
the 
size 
ot 
the 
28F008SA 
and 
" 
" 
located 
'over' 
the 
28F008SA 
in the 
system 
memory 
map. 
Accessing 
specitic 
" 
" 
locations 
ot the 
28F008SA 
is then 
accomplished 
by passing 
the 
chosen 
tunction 
" 
'* 
an 
offset 
trom 
the 
array 
base 
versus 
a specitic 
address. 
Different 
*' 
'* 
microprocessor 
architectures 
wIll 
require 
different 
array 
definitions; 
Ie 
tor 
*' 
" 
the 
Intel 
architecture, 
define 
it as 
'byte 
eightmeg[16][10000]' 
and 
pass 
each 
" 
'* 
function 
TWO 
offsets 
to access 
a specitic 
location. 
MCS-96architectures 
are 
*' 
" 
limited 
to 
'byte 
eightmeg[lOOOO]'; 
alternate 
approaches 
such 
as using 
port 
pins 
" 
" 
tor 
paging 
will 
be 
required 
to 
access 
the 
tull 
tlash 
array 
" 
" 
" 
'* 
To create 
a tar pointer. 
a function 
such as MK_FP()can be used. 
given 
a segment and 
*/ 
'* 
offset 
in the Intel 
architecture. 
I use Turbo-C; see your compiler 
reference 
*/ 
" 
manual 
tor 
additional 
information. 
" 
,********************* 
•••••••• 
*••••••••••••• 
*•• ****.*.* 
•• ***** •••••••••••• 
*.*** ••• *.* •••••••••• 
*•• ,.••• , 


, •••••••• *.* ••••••••••••••••••••••••••••••••••••• 
*.* ••••••• 
*•• * •••••••••••••••••••••••••••••••••••..••• 
, 


" 
Revision 
History: 
Rev 
2.1 
" 


" 
" 
" 
Changes 
From 
Revision 
1.0 
to 
Revision 
2.0: 
" 


" 
Added 
alternate 
28F008SA 
device 
10 to 
routine 
idread() 
" 


" 
" 
" 
Changes 
trom 
2.0 
to 
2.1: 
Revised 
the 
Erase 
Suspend 
algorithm 
to 
remove 
potential 
" 


,. 
-infinite 
loop· 
caused by the WSWgoing 
-ready- 
after 
the system reads the 
., 
,. 
Status 
Register. 
and before 
the system issues 
the Erase Suspend command 
., 
, •••••••••••••••••••••••••••••••••• 
**.* ••••••••••••••••••••••••••••••••••••••••••••••••••••• 
*.** ••• *•• , 
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I····················································· 
, 
'0 
Function: 
Main 
*' 
'* 
Description: 
The 
following 
code 
shows 
examples 
of byte 
write 
and 
block 
*' 
'* 
erase 
algorithms 
that 
can 
be 
modified 
to 
fit 
the 
specific 
application 
and 
*' 
'* 
hardware design 
*' 
I····················································· 
, 
main() 
( 


'* 
The 
following 
code 
gives 
an 
example 
of a possible 
byte 
write 
algorithm. 
'* 
Note 
that 
Vpp 
does 
not 
need 
to 
be 
cycled 
between 
byte 
writes 
when 
a string 
of byte 
'0 
wri tes 
occurs. 
Ramp 
Vpp 
to 
12V 
before 
the 
first 
byte 
write 
and 
leave 
at 
12V 
until 
'* 
completion 
of the 
last 
byte 
write. 
Doing 
so minimizes 
Vpp 
ramp 
up-down 
delay 
and 
'0 
maximizes 
byte 
write 
throughput 
vppup() 
; 
'0 
'INSERT 
SOFTWARE 
DELAY 
FOR 
VPP 
RAIIP IF REQUIRED' 
pwddis () ; 
address 
= OXxxxxxL; 
data 
= OXyy; 
if 
(writebgn(data.address) 
= 1) 
'* 
'RECOVERY 
CODE-POWER 
NOT 
APPLIED 
(ID CHECK 
FAIL)' 
else 
( 


*' 
*' 
atter 
*' 
*' 
*' 


*' 


*' 


while 
(end(lstatus) 
) 
switch 
(writechk(status) 


I 


This "C" routine gives an example of combining lower-level functions (found in following pages) to complete a byte 
write. Routines vppup( ) and pwddis( ) enable the 28FOO8SAfor byte write. Function writebgn( ) issues a byte write 
sequence to the device, end() detects byte write completion via Status Register bit 7, and writechk() analyzes Status 
Register bits 3-6 to determine byte write success.lfa 
string of bytes is to be written at one time, Vpp ramp up and 


RP# 
disable need only be done before the first byte write attempt. Additionally, when writing multiple bytes at 


once, examination of bits other than bit 7 (WSM Ready) need only occur after the last byte write has completed. The 
Status Register retains any error bits until the Clear Status Register command is written. 


'* 
The 
tollowing 
code 
gives 
an 
example 
at a possible 
block 
erase 
algorithm. 
*' 
'* 
Note 
that 
Vpp 
does 
not 
need 
to 
be 
cycled 
between 
block 
erases 
when 
e 
string 
at block 
*' 
'* 
erases 
occurs. 
Ramp 
Vpp 
to 
12V 
betore 
the 
tirst 
block 
erase 
and 
leave 
at 
12V 
until 
atter 
*' 
'* 
completion 
at the 
last 
block 
erase. 
Doing 
so minimizes 
Vpp 
ramp 
up-down 
delay 
and 
*' 
'* 
maximizes 
block 
erase 
throughput 
*' 
vppup() 
; 
'* 
'INSERT 
SOFTWARE 
DELAY 
FOR 
VPP 
RAMP 
IF REQUIRED' 
*' 
pwddis 
() ; 
address 
= OXxxxxxL; 
it 
(erasbgn(address) 
= 1) 
'* 
'RECOVERY 
CODE-POWER 
NOT 
APPLIED 
(ID CHECK 
FAIL)' 
*' 
else 
I 


This "C" routine gives an example of combining lower-level functions (found in following pages) to complete a block 
erase. Routines vppup( ) and pwddis( ) enable the 28FOO8SAfor block erase. Function erasbgn( ) issues a block erase 
sequence to the device, end( ) detects block erase completion via Status Register bit 7, and eraschk( ) analyzes Status 
Register bits 3-6 to determine block erase success. If a string of blocks is to be erased at one time, Vpp ramp up and 
RP# 
disable need only be done before the first block erase attempt. Additionally, when erasing multiple blocks at 
once, examination of bits other than bit 7 (WSM Ready) need only occur after the last block erase has completed. 
The Status Register retains any error bits until the Clear Status Register command is written. 


, 


.•.~ 
•••••~•••• 
u • 
.IltJ"uogcn 
*' 
'0 
Description: Begins erase at a block. 
0' 
'0 
Inputs: 
blckaddr: System address within the block to be erased 
0' 
'0 
Outputs: 
None 
0' 
'0 
Returns: 
0 = Block erase successtully initiated 
0' 
'0 
1 = Block erase not initiated (ID check error) 
0' 
'0 
Device Read Mode on Return: Status Register 
(10 it returns 1) 
0' 
, 
, 


it (idread(lmtgrid.ltdeviceid)=l) 
return (1); 


0blckaddr = ERASErup; 
0blckaddr = ERASCONJI'; 
return 
(0); 


Routine erasbgn( ) issues a block erase command sequence to a 28FOO8SA.It is passed the desired system address for 
the block to be erased. After calling idread(), 
it writes the erase command sequence at the specified address. It 


returns "0" if block erase initiation was successful, and "I" if the ID read fails (device not powered up or RP# not 
disabled). 


,.................................•................................................................... 
, 


'" 
Function: 
Erassusp 
"' 
'" 
Description: 
Suspends 
block 
erase 
to 
read 
from 
another 
block 
"' 


'" 
Inputs: 
None 
"' 


'" 
Outputs: 
None 
"' 
'" 
Returns: 
0 = Block 
erase 
suspended 
"' 


'" 
1 = Error; 
Write 
State 
Machine 
not 
busy 
(block 
erase 
suspend 
not 
possible) 
"' 


'" 
Device 
Read 
Mode 
on Return: 
Status 
Register 
"' 
,•••••••••••••••••••••••••••...•.•.........•••..•.•••......•••..............................••••.•..•. 
, 


#def1ne 
RDYIlASK 
OX80 


#define 
WSMRDY 
OX80 


#def1ne 
SUSPIIASK 
OX40 


#define 
ESUSPYES 
OX40 


#define 
STATREAD 
OX70 


#define 
SYSADDR 
0 


#define 
SUSPCMD 
OXBO 


int 
erassusp( 
) 


byte 
far 
·stataddr; 


stataddr 
(byte 
far 


"stataddr 
SUSPCMD 
; 
·stataddr 
STATREAD 
; 


'" Mask 
to 
isolate 
the 
WSM 
Status 
bit 
of 
the 
Status 
Register 
"' 


'" 
Status 
Register 
value 
after 
masking, 
signifying 
that 
"' 
'" 
the 
WSM 
is no 
longer 
busy 
"' 


'" Mask 
to 
isolate 
the 
erase 
suspend 
status 
bit 
of 
the 
"' 


'" 
Status 
Register 
"' 


'" 
Status 
Register 
value 
after 
masking, 
signifying 
that 
"' 
'" 
block 
erase 
has 
been 
suspended 
"' 


'" 
Read 
Status 
Register 
command 
"' 
'" 
This 
constant 
can 
be 
initialized 
to 
any 
address 
within 
"' 


'" 
the 
memory 
map 
of 
the 
target 
28F008SA 
and 
is 
"' 
'" 
alterable 
depending 
on 
the 
system 
architecture 
"' 
'" 
Erase 
Suspend 
command 
"' 


")SYSADDR; 
'" Write 
Erase 
Suspend 
command 
to 
the 
device 
"' 
,. 
Write Read Status 
Register 
command•• necessary 
in case 
., 


'" 
erase 
is already 
completed 
"' 


while 
« 
"stataddr 
I: RDYIlASK) 
1= WSMRDY) 
'" Will 
remain 
in while 
loop 
until 
bit 
7 of 
the 
Status 
"' 
1* 
Register 
goes 
to 
I, 
signifying 
that 
"' 
'" 
the 
WSM 
is no 
longer 
busy 
"' 
if 
«"stataddr 
I: SUSPIlASK) 
ESUSPYES) 
return 
(0); 
,. 
Erase is 
suspended .. 
return 
code ·0· 
., 
return 
(1); 
,.Erase 
has already 
completed; 
suspend not possible. 
., 
,. 
Error code ·1· 
., 


Routine erassusp( ) issues the erase suspend command to a 28FOO8SA.It first makes sure the WSM is truly busy, 
then issues the erase suspend command and polls Status Register bits 7 and 6 until they indicate erase suspension. It 
returns "0" if block erase was successful, and "I" if the WSM was not busy when suspend was attempted. 


, 
, 


,. 
Function: 
Erasres 
., 


/" 
Description: 
Resumes 
block 
erase 
previously 
suspended 
"/ 


/" 
Inputs: 
None 
"/ 


/" 
Outputs: 
None 
"/ 


/" 
Returns: 
0 = Block 
erase 
resumed 
"/ 


,. 
1 = Error; 
Block 
erase 
not 
suspended 
when 
function 
called 
., 


/" 
Device 
Read 
Mode 
on Return: 
Status 
Register 
"/ 
, 
, 


Iderine 
RDYI/ASK 
OXBO 
1* Mask 
to 
isolate 
the 
WSM 
Status 
bit 
of 
the 
Status 
Register 


Ide fine 
WSMRDY 
OXBO 
1* 
Status 
Register 
value 
atter 
masking, 
signifying 
';hat the 
1* 
WSM 
is 
no 
longer 
busy 


Iderine 
SUSPI/ASK 
OX40 
1* Mask 
to 
isolate 
the 
erase 
suspend 
status 
bit 
of 
I;he 


1* 
Status 
Register 


Iderine 
ESUSPYES 
OX40 
1* 
Status 
Register 
value 
after 
masking, 
signifying 
1.hat 


1* 
block 
erase 
has 
been 
suspended 


Iderine 
STATREAD 
OX70 
/" Read 
Status 
Register 
command 


Iderine 
SYSADDR 
0 
/" This 
constant 
can 
be 
ini tial1zed 
to 
any 
address 
.'ithin 
/" 
the 
memory 
map 
of 
the 
target 
2BFOOBSA 
and 
is 


/" 
alterable 
depending 
on 
the 
system 
architecture 
Iderine 
RESUMCMD 
OXDO 
/" Erase 
He sume 
command 


int 
erasres 
() 


byte 
far 
"stataddr; 
/" Pointer 
variable 
used 
to write 
commands 
to 
device 


stataddr 
= 
(byte 
tar 
")SYSADDR; 


"stataddr 
= 
STATREAD; 
/" Write 
Read 
Status 
Register 
command 
to 
2BFOOBSA 
"/ 


it 
(("stataddr 
a: SUSPI/ASK) 
!= ESUSPYES) 
return 
(1); 
,. Block 
erase 
not 
suspended. 
Error 
code 
-1- 
., 
"stataddr 
= RESUMCMD; 
/" Write 
Erase 
Resume 
command 
to 
the 
device 
"/ 


while 
(("stataddr 
a: SUSPI/ASK) == 
ESUSPYES) 
/" Will 
remain 
in while 
loop 
until 
bit 
6 of 
the 
Status 
"/ 


/" 
Register 
goes 
to 
0, 
signifying 
block 
"/ 


,. 
erase 
resumption 
., 


while 
(("stataddr 
a: RDYI/ASK) == WSMRDY) 
/" 
Will 
remain 
in while 
loop 
until 
bit 
7 of 
the 
Statl s 
"/ 


/" 
Register 
goes 
to 
0, 
signifying 
that 
the 
WS~ 
is 
"/ 


/" 
once 
again 
busy 
"/ 


Routine erasres( ) issues the erase resume command to a 28FOO8SA.It first makes sure the WSM is truly suspended, 
then issues the erase resume command and polls Status Register bits 7 and 6 until the indicate WSM resumption. It 
returns "0" if block erase resume was successful, and "I" if the WSM was not suspended when resumption was 
attempted. 


/••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••..••••• 
**/ 


" 
Function: 
End 
" 


" 
Description: 
Checks 
to 
see 
it the WSII is busy 
(is byte 
write'block 
erase 
completed?) 
" 


" 
Inputs: 
None 
" 


" 
Outputs: 
statdata: 
Status 
Register 
data 
read 
from 
device 
" 


" 
Returns: 
0 = Byte 
Write,Block 
Erase 
completed 
" 


" 
1 = Byte 
Write,Block 
Erase 
still 
in progress 
" 


" 
Device 
Read 
Mode 
on Return: 
Status 
Register 
" 
/ .....................................................••..........•.•........•.......•••••••••••• 
~, 
/ 


Idefine 
RDYMASK 
OX80 
" 
Mask 
to 
isolate 
the 
WSM 
Status 
bit 
of the 
Statu" 
" 
Ide fine 
WSIIRDY 
OX80 
" 
Register 
value 
after 
masking, 
signitying 
that 
the 
" 


" 
WSII is no 
longer 
busy 
" 


" 
Read 
Status 
Register 
command 
" 


" 
This 
constant 
can 
be 
initialized 
to any 
address 
within" 


" 
the 
memory 
map 
of the 
target 
28F008SA 
and 
is 
" 


" 
alterable 
depending 
on the 
system 
architacture 
" 


stataddr 
= 
(byte 
far 
'stataddr 
= STATREAD; 
if 
(( ('statdata 
= 'stataddr) 
return 
(1); 


')SYSADDR; 
" 
Write 
Read 
Status 
Register 
command 
to 28F008SA 
& RDYIlASK) 
!= WSMRDY) 
/. 
Byte write/biock 
erasure still 
in progress ... colie -1- 
./ 
/* 
Byte 
write'block 
erase 
attempt 
completed 
•••code '0' 
" 


Routine end( ) detects completion of byte write or block erase operations of a 28FOO8SA.It passes back the Status 
Register data it reads from the device. It also returns "0" if Status Register bit 7 indicates WSM "Ready", and "I" if 
indication is that the WSM is still "Busy". 


intel~ 


, •••••••••••••••••• 
** ••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••• 
,t ••••••••••• 
, 
'* 
Function: 
Eraschk 
*' 


" 
Description: 
Completes 
tull 
Status 
Register 
check 
tor 
block 
erase 
(proper 
commanrl 
" 
'* 
sequence, 
Vpp low detect. 
block 
erase 
success). 
This routine 
assumeS that 
block *' 
'* 
erase 
completion 
has 
already 
been 
checked 
in 
function 
snd(), 
and 
theretore 
does *' 


" 
not 
check 
the 
WSM 
Status 
bit 
ot the 
Status 
Register 
" 


" 
Inputs: 
statdata: 
Status 
Register 
data 
read 
in 
tunction 
end 
" 


" 
Outputs: 
None 
" 


" 
Returns: 
0 
Block 
erase 
completed 
successtully 
" 
'* 
1 
Error; 
Vpp low detect 
• / 
'* 
2 
Error; 
Block 
erase 
error 
*' 
'* 
3 
Error; 
Improper 
command 
sequencing 
*' 
'* 
Device 
Read 
Mode 
on Return: 
Same 
as 
when 
entered 
*' 
/ ..•.•..•................•.........•..•.••..•.. 
~ 
, 


#detine 
ESE~SK 
OX30 
" 


Mask 
to 
isolate 
the 
erase 
and 
byte 
write 
status 
bits 
ot 
" 


" 


the 
Status 
Register 
" 
#define 
ESEQFAIL 
OX30 
" 


Status 
Register 
value 
atter 
masking 
it block 
erase 
" 


" 


commandsequence 
error 
has been detected 
" 
#define 
EERRMSK 
OX20 
" 


Mask 
to 
isolate 
the 
erase 
status 
bit 
ot the 
" 


" 


Status 
Register 
" 
#define 
ERASERR 
OX20 
" 


Status 
Register 
value 
atter 
masking 
it 
block 
erase 
error 
" 


" 


has 
been 
detected 
" 
#define 
VLOWMASK 
OXOB 
" 
Mask 
to 
isolate 
the 
Vpp 
status 
bit 
ot the 
Status 
Register 
" 
#define 
VPPLOW 
OXOB 
" 


Status 
Register 
value 
atter 
masking 
it Vpp 
low 
" 


" 


has 
been 
detected 
" 


int 
eraschk(statdata) 


byte 
statdata; 
1* 
Status 
Register 
data 
that 
has 
been 
already 
read tram the 
" 
1* 
2BFOOBSA 
in 
tunction 
end() 
" 


it 
«statdata 
l VLOWMASK) 
= VPPLOW) 
return 
(1); 
'* Vpp low detect 
error, 
return 
code -1- 
*' 


it 
llstatdata 
l EERRMSK) = ERASERR) 


return 
(2); 
'* Block erase 
error 
detect, 
return 
code -2- 
*' 
it 
«statdata 
l ESE~SK) 
ESEQFAIL) 
return 
(3); 
'* Block erase 
commandsequence 
error, 
return 
code -3· 
*' 
return 
(0); 
'* Block erase 
success, 
return 
code ·0· 
*' 


Routine eraschk( ) takes the Status Register data read in end( ) and further analyzes it. It returns 
'0" if block erase 
was successful, "1" ifVpp low error was detected, "2" if block erase error was reported and "3" if an erase command 
sequence error was found (erase setup followed by a command other than erase confirm). This is uueful after a block 
or string of blocks has been erased, to check for successful completion. 


,.....................................................•••••.....•...•••.••........•.....•••••••. 
:~....., 


,. 
Function: 
Writebgn 
., 
,. 
Description: 
Begins 
byte 
write 
sequence 
., 
,. 
Inputs: 
wdata: 
Data 
to be written 
into 
the 
device 
., 
,. 
waddr: 
Target 
address 
to be written 
., 
,. 
Outputs: 
None 
., 
,. 
Returns: 
0 = Byte 
write 
successfully 
initiated 
., 
,. 
1 = 
Byte 
write 
not 
initiated 
(ID check 
error) 
., 
,. 
Device 
Read 
Mode 
on Return: 
Status 
Register 
(ID if returns 
1) 
., 
, 
_ 
, 


r 
Data 
to be written 
into 
the 
28F008SA 
,. waddr 
is the 
destination 
address 
for 
the 
data 
,. 
to be written 


if 
(idread(imfgrid,ldeviceid)==l) 
,. Device 
ID read 
error •••powered 
up? 
., 
return 
(1); 
'waddr 
SETUPCMD; 
,. Write 
Byte 
Write 
Setup 
command 
and 
destination 
address 
., 
'waddr 
wdata; 
,. Write 
byte 
write 
data 
and 
destination 
address 
., 
return 
(0); 
, 
, 
,. 
Function: 
Writechk 
., 
,. 
Description: 
Completes 
full 
Status 
Register 
check 
for byte 
write 
(Vpp low 
detect, 
byte 
., 
,. 
write 
success). 
This 
routine 
assumes 
that 
byte 
write 
completion 
has 
already" 
,. 
been 
checked 
in function 
end() 
and 
therefore 
does 
not 
check 
the 
WSM 
Status 
., 
,. 
bit 
of the 
Status 
Register 
., 
,. 
Inputs: 
statdata: 
Status 
Register 
data 
read 
in function 
end() 
., 
,. 
Outputs: 
None 
., 
,. 
Returns: 
0 
Byte 
write 
completed 
successfully 
., 
,. 
1 = Error: 
Vpp 
low 
detect 
., 
,. 
2 = Error; 
Byte 
write 
error 
., 
,. 
Device 
Read 
Mode 
on Return: 
Status 
Register 
., 
,••••••••••••••••••••••••• 
!••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••• 
, 
,. Mask 
to 
isolate 
the 
byte 
write 
error 
bit 
of the 
., 
,. 
Status 
Register 
., 
r 
Status 
Register 
value 
after 
masking 
if byte 
write 
error ., 
,. 
has 
been 
detected 
., 
,. Mask 
to 
isolate 
the 
Vpp 
status 
bit 
of the 
., 
,. 
Status 
Register 
., 
,. Status 
Register 
value 
after 
masking 
if Vpp 
low 
., 
,. 
has 
been 
detected 
., 


if 
((statdata 
l VLOWMASK) 
== 
return 
(1); 
if 
((stat data 
l WERRMSK) 
return 
(2); 
return 
(0); 


VPPLOW) 
,. Vpp 
low detect 
error, 
return 
code 
-1- 
WRIrERR) 
,. Byte 
write 
error 
detect, 
return 
code 
-2- 
,. Byte,string 
write 
success, 
return 
code 
·0· 


Routine writebgn( ) issues a byte write command sequence to a 28FOO8SA.It is passed the desired system address for 
the byte to be written, as well as the data to be written there. After calling idread( ), it writes the byte write command 
sequence at the specified address. It returns "0" if byte write initiation was successful, and "I" if the ID read fails 
(device not powered up or RPlif not disabled). 


Routine writechk( ) takes the Status Register data read in end( ) and further analyzes it. It returns "0" if byte write 
was successful, "I" ifVpp low error was detected, and "2" if byte write error was reported. This is useful after a byte 
or string of bytes has been written, to check for successful completion. 


intel~ 


,..••.......•.................••••••••••.•............•..••.•••••••••••.•.........•••..•••............• 
, 
,. 
Function: 
Idread 
• 
., 
,. 
Description: 
Reads 
the 
manutacturer 
and 
device 
IDs 
trom 
the 
target 
28F008SA 
., 
,. 
Inputs: 
None 
., 


,. 
Outputs: 
mtgrid: 
Returned 
manutacturer 
ID 
., 
,. 
deviceid: 
Returned 
device 
ID 
., 
,. 
Returns: 
0 = 
ID read 
correct 
., 


,. 
1 = Wrong 
or no 
ID 
., 


,. 
Device 
Read 
Mode 
on Return: 
Intelligent 
Identitier 
., 
,*..,.,.,...,.,.,. 
,.,. 
,. 
,.,.,...,.,.,./ 


#detine 
MFGRADDR 
0 


#detine 
DEVICADD 
1 


#detine 
IDRDCOIIM 
OX90 
#detine 
INTELID 
OX89 
#detine 
DVCID 
OXOA2 
#detine 
DVCID2 
OXOAl 


int 
idread (mtgrid, devi ce id) 


byte 
·mtgrid; 


byte 
·deviceid; 


,. Address 
'0' 
tor 
the 
target 
28F008SA •••alterable 


,. 
on the 
system 
architecture 
,. Address 
'I' 
tor 
the 
target 
28F008SA •••alterable 
'* 
on the 
system 
architecture 
,. Inteligent 
Identitier 
command 
'* Manufacturer 
10 tor 
Intel 
devices 
,. Device 
IDs 
tor 
28F008SA 


depending 
.,., 


depending 
.,.,.,.,., 


,. The 
,. 
,. The 
,. 


manufacturer 
ID read 
by this 
function, 
to be 


transterred 
back 
to the 
calling 
program 
device 
ID read 
by this 
function, 
to be transturred 
back 
to the 
calling 
tunction 


byte 
tar 
*tempaddr; 
tempaddr 
= 
(byte 
tar 


.tempaddr 
= 
IDRDCOIIM; 


,. Pointer 
address 
variable 
used 
to 
read 
IDs 


·)MFGRADDR; 
,. Write 
Intelligent 
Identitier 
command 
to an addres!l within 
., 
,. 
the 
28F008SA 
memory 
map 
(in this 
case 
00 hEX) 
., 
·mtgrid 
·tempaddr; 
,. Read 
mtgr 
ID, tempaddr 
still 
points 
at address 
'0' 
., 
tempaddr 
(byte 
tar 
·)DEVICADD; 
,. Point 
to address 
'I' tor 
the 
device 
specitic 
ID 
., 
·deviceid 
·tempaddr; 
,. Read 
device 
ID 
., 


it 
((.mtgrid 
!= INTELID) 
((·deviceid!= 
DVCID) 
U 
(·deviceid 
!= DVCID2») 
return 
(1); 
'* ID read 
error; 
device 
powered 
up? 
return 
(0); 


Routine idread() issues the Intelligent Identifier command to a 28FOO8SA.It passes back the manufacturer and 
device IDs it reads. In addition, it returns "0" if the IDs read matched those expected for t~.e 28FOO8SAor 
28FOO8SA-L,and "1" if either the manufacturer or device IDs did not match. 


,•••••••..•.•...............•••.•......•..............•••................•••.....•.............••..••• 
, 
,. 
Function: 
Statrd 
., 
,. 
Description: 
Returns 
contents 
of the 
target 
28F008SA 
Status 
Register 
., 
,. 
Inputs: 
None 
., 
,. 
Outputs: 
statdata: 
Returned 
Status 
Register 
data 
., 
,. 
Returns: 
Nothing 
., 
,. 
Device 
Read 
Mode 
on Return: 
Status 
Register 
., 
, 
, 
Idefine 
STATREAD 
OX70 
1* Read 
Status 
Register 
cOlDIDand 
., 
Idefine 
SYSADDR 
0 
,. This 
constant 
can 
be 
initialized 
to any 
address 
within 
., 


,. 
the 
memory 
map 
of the 
target 
28F008SA 
and 
is 
., 


,. 
alterable 
depending 
on the 
system 
architecture 
., 


stataddr 
·stataddr 
·statdata 
return; 


(byte 
far 
.)SYSADDR; 
STATREAD; 
1* Write 
Read 
Status 
Register 
cOlDIDandto 28F008SA 


·stataddr; 


, 
, 
,. 
Function: 
Statclr 
., 
,. 
Description: 
Clears 
the 
28F008SA 
Status 
Register 
., 
,. 
Inputs: 
None 
., 
,. 
Outputs: 
None 
., 
,. 
Returns: 
Nothing 
., 
,. 
Device 
Read 
Mode 
on Return: 
Array 
., 
, 
, 


,. Clear 
Status 
Register 
command 
,. This 
constant 
can 
be 
initialized 
to any 
address 
within 


,. 
the 
memory 
map 
of the 
target 
28F008SA 
and 
is 


,. 
alterable 
depending 
on the 
system 
architecture 


stataddr 
·stataddr 
return; 


Routine statrd( ) reads a 28FOO8SAStatus Register. It issues the Read Status Register command and passes back the 
data it obtains. 


Routine statclr( ) issues the Clear Status Register command to a 28FOO8SA.This routine is required after analyzing 
Status Register contents in routines like eraschk( ) and writechk(). 
The 28FOO8SAStatus Register retains state of 
bits 3-6 until they are cleared by the Clear Status Register command. 


intel~ 


,* 
/ 
/* 
Function: 
Rdmode 
0' 
'0 
Description: 
Puts 
the 
target 
28F008SA 
in Read 
Array 
Mode. 
This 
tunction 
might 
be 
used, 
tor 0' 
'* 
example, 
to prepare 
the 
system 
tor 
return 
to 
code 
execution 
out 
ot the Flash 
*' 
'0 
memory 
atter 
byte 
write 
or block 
erase 
algorithms 
have 
been 
executed 
ott-chip 
0' 
'0 
Inputs: 
None 
0' 
'0 
Outputs: 
None 
0' 
'* 
Returns: 
Nothing 
0' 
'0 
Device 
Read 
Mode 
on Return: 
Array 
0' 
, 
, 


'0 Read 
'0 This 
'0 
/* 


Array 
command 
constant 
can 
be 
initialized 
to 
any 
address 
within 


the 
memory 
map 
at the 
target 
28F008SA 
and 
is 


alterable 
depending 
on 
the 
system 
architecture 


tempaddr 
*tempaddr 
return; 
, 
, 


'0 
Function: 
Rdbyte 
*' 
'0 
Description: 
Reads 
a byte 
at data 
tram 
a specitied 
address 
and 
returns 
it to 
the 
0' 
'0 
calling 
program 
0' 
'0 
Inputs: 
raddr: 
Target 
address 
to 
be 
read 
tram 
0' 
'0 
Outputs: 
rdata: 
Data 
at 
the 
specitied 
address 
0' 
'0 
Returns: 
Nothing 
0' 
'0 
Device 
Read 
Mode 
on Return: 
Array 
0' 
, 
, 


int 
rdbyte (rdata, raddr) 
byte 
*rdata; 
byte 
tar 
*raddr; 


/* Write 
read 
array 
command 
to 
an 
address 
within 
the 
'* 
28F008SA 
(in this 
case 
the 
target 
address) 
'* Read 
tram 
the 
specified 
address 
and 
store 


Routine rdmode() 
simply puts a 28FOO8SAin Read Array mode. This is useful after byte write and block erase 
operations, to return the 28FOO8SAto its "normal" 
mode of operation. After block erase or byte write, the 
28FOO8SAwill continue to output Status Register data until the Read Array command is iS8uedto it, for example. 


Routine rdbyte() not only puts the 28FOO8SAin Read Array mode, it also reads a byte of data. It is passed the 
desired system byte address, and passes back the data at that address. 


~I 
,. 
Function: 
Vppup 
., 
,. 
Description: 
Ramps 
the Vpp 
supply 
to the target 
28F008SA 
to enable 
byte write 
or block 
., 
,. 
erase. 
This 
routine 
can be tailored 
to the 
individual 
system 
architecture. 
For 
., 
,. 
purposes 
of this 
example, 
I assumed 
that 
a system 
Control 
Register 
existed 
at 
., 
,. 
system 
address 
20000 
hex, 
with 
the 
following 
definitions: 
., 
,. 
., 
r 
Bit 7: Vpph 
Control: 
1 
Enabled 
., 
,. 
0 
Disabled 
., 
r 
Bit 8: FWD 
Control: 
1 
PowerDown 
Enabled 
., 
r 
0 
PowerDown 
Disabled 
., 
,. 
Bits 
5-0: Undefined 
., 
,. 
., 
,. 
Inputs: 
None 
., 
,. 
Outputs: 
None 
*' 
'* 
Returns: 
Nothing 
*' 
'* 
Device 
Read 
Mode 
on Return: 
As 
existed 
before 
entering 
the 
function. 
Part 
is now 
ready 
for ., 
'* 
program or erase 
*/ 
, 
, 


(byte far *)SYSCADDR, 
*contaddr 
I VPPHIGH, 
'* 


, 
, 
,. 
Function: 
Vppdown 
*' 
,. 
Description: 
Ramps 
down 
the Vpp 
supply 
to the target 
28F008SA 
to disable 
byte write'block 
*' 
'* 
erase. 
See above tor a description 
ot 
the assumed system Control Register. 
*' 
'* 
Inputs: 
None 
*' 
,. 
Outputs: 
None 
*' 
'* 
Returns: 
Nothing 
*' 
,. 
Device 
Read 
Mode 
on Return: 
As 
existed 
before 
entering 
the 
function. 
Part 
now has 
high 
Vpp 
*' 
,. 
disabled. 
If byte write 
or block 
erase 
was 
in progress 
when 
this 
function 
was 
., 
,. 
called, 
it will 
complete 
unsuccessfully 
with 
Vpp 
low error 
in the 
*' 
'* 
Status 
Register. 
*' 
, 
, 


contaddr 
= 
(byte far 
*)SYSCADDR, 
*contaddr 
= *contaddr 
& VPPDWN; '* Read 
current 
Control 
Register 
data. 
-AND- 
with 
'* 
constant 
to 
lower 
Vpp 


Functions vppup() 
and vppdown() 
give examples of how to control via software the hardware that enables or 


disables 12V Vpp to a 28FOO8SA.The actual hardware implementation chosen will drive any modification of these 
routines. 


inteJ~ 


, 
~.....•.......... / 


'* 
Function: Pwden 
*' 
'* 
Description: Toggles the 28F008SA RPi pin low to put the device in Deep Pow"rDown mode. 
*' 
'* 
See above for a description 
of the assumed system Control Register. 
*' 
'* 
Inputs: 
None 
*' 
'* 
Outputs: 
None 
*' 
'* 
Returns: 
Nothing 
*' 
'* 
Device 
Read 
Mode 
on Return: 
The 
part 
is powered 
down. 
If byte 
write 
or block 
erase 
was 
in *' 
'* 
progress when this function was called, it '0'111 
abort with resultIng partially 
*' 
'* 
written or erased data. Recovery in the form of repeat of byte wrUe 
or block 
*' 
1* 
erase 
w111 
be required 
once the part transl tions 
out of powerdown, to 
*' 
'* 
initialize data to a known state. 
*' 
,•••••••••••••••••••••••••.••....••.•••••.......•.••..•••••.............•............................. 
, 


(byte far *)SYSCADDR; 
*contaddr 
I 
PWD; 1* Read current 
Control 
Register 
data, 
·OR- with 
constant 
'* 
to 
enable 
Deep 
PowerDown 
, 
, 
'* 
Function: Pwddis 
*' 
'* 
Description: Toggles the 28F008SA RPi pin high to transition the part out of Deep 
*' 
,. 
PowerDown. 
See 
above 
tor 
a description 
at 
the 
assumed 
system 
Control 
Register. 
., 
'* 
Inputs: 
None 
*' 
'* 
Outputs: 
None 
*' 
'* 
Returns: 
Nothing 
*' 
,. 
Device 
Read 
Mode 
on Return: 
Read 
Array 
mode. 
Low 
voltage 
is removed 
tram 
the 
RP# 
pin. 
., 
'* 
28F008SA output pins will output valid data time tPHQV after the BPi pin 
*' 
'* 
transitions high (reference the datasheet AC Read Characteristics) assuming 
*' 
,. 
valid 
states 
on all 
other 
control 
and 
power 
supply 
pins. 
., 
,.....•....•..•.•••••••••••••••.....................••••••••••••••••...•..•••.•.•.•................... 
, 


(byte far *)SYSCADDR; 
*contaddr 
i PWDOFF; 
,. Read 
current 
Control 
Register 
data, 
-AND- 
with 


,. 
constant 
to 
disable 
Deep 
PowerDown 


Functions pwden() and pwddis( ) give examples of how to control via software the hardware that enables or disables 
a 28FOO8SARP # input. The actual hardware implementation chosen will drive any modification of these routines. 
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As personal computers migrate to platforms that are 
easily held with one hand, a revolutionary system archi- 
tecture is required to meet space and power require- 
ments. 
• An architecture that is not bounded by what has 


been done before with existing memory architecture, 
but free to meet the demanding requirements of mo- 
bile end users. 


• An architecture free to adapt and accommodate new 


technological advances in software and hardware, 
while protecting end-users initial base hardware in- 
vestment. 


Implementing 
this new system architecture 
requires 


traditional PC storage media such as ROM, DRAM, 
floppy disk and hard disk to move aside and make 
room 
for 
the 
latest 
in 
memory 
storage, 
Intel's 


FlashFile™ 
memory (see architecture comparison in 


Figure 1.). 
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By combining FlashFile memory with new system ar- 
chitecture, completely new types of computers are now 
possible that fit in the palm of your hand and replace or 
integrate many of the code or storage functions of other 
memory types. Moreover, FlashFile memory enables 
hand-held computers to last many hours on just a cou- 
ple of AA batteries. FlashFile memory can be used for 
storing e~ecute- !n-.flace (XIP) code in the system's 
memory map, while additionally functioning like a disk 
for file and program storage. Since this type of design 
features FlashFile memory resident on the PC's moth- 
erboard and is typically arranged in an array, it is de- 
scribed as a Resident Flash Array (or RFA). To further 
differentiate the two tasks of an RF A, the file store task 
is called a Resident Bash Jdisk (RFD), while the XIP 
task is called Resident ,Elash for ~IP 
(or RFX) code 


storage. 


The FlashFile memory is also used in card form as 
specified by the Personal Computer Memory Card In- 
ternational 
Association 
(PCMCIA). 
Flash 
memory 


cards provide file and program storage similar to an 
RFD, but add the feature of removability, increasing or 
adding to ease-of-use for the end user. The PCMCIA 
specification addresses both 
the memory 
and 
I/O 


card's physical, electrical and mechanical characteris- 
tics, while leaving the host PC implementation relative- 
ly free for interpretation. 
Enhancing 
the PCMCIA 


specification, Intel developed the Exchangeable Card 
Architecture 
(ExCA TM), which defines the host PC 


system 
card 
interface. 
ExCA 
further 
refines 
the 


PCMCIA specification and provides for card exchange- 
ability and inter-operability for both memory and I/O 
cards. 


Memory and I/O cards complement this new mobile 
architecture by integrating many of the common but 
functionally separate tasks used by today's mobile pro- 
fessional in either electronic or paper form. Some of 
these tasks 
are 
schedule 
keepers, 
phones, 
address 


books, checkbooks, credit cards, fax, pagers, personal 
voice storage, 
task 
managers/schedulers, 
paperless 


form reports, scratch pads, and notepads. 


1.1 
Why A New Memory 
Architecture? 


The ideal hand held memory system is: 
• Power Conscious (prolongs battery life and reduces 


heat) 
• Dense (stores lots of code and data in a small 


amount of space but weighs very little) 


• Updateable (allows in-situ code enhancements) 
• Fast (lets you read and write data quickly) 
• Inexpensive (low cost per megabyte) 
• Reliable (retains data when exposed to extreme tem- 


perature and mechanical shock) 


Since the PC's introduction over 10 years ago, design- 
ers have grappled with how to construct memory sys- 
tems that met the above criteria. Portable computing 
makes the system design even tougher with more strin- 
gent requirements for low power, low volume and less 
weight. The best combination available for portable de- 
signs in their infancy was the same as used for the desk- 
top; solid-state memory 
and magnetic 
storage, i.e., 


SRAMs, DRAMS plus magnetic hard disks. DRAMs 
are dense and inexpensive, yet slower than the proces- 
sors they serve, and they are volatile. SRAMs, although 
fast enough to keep pace with processors, are relegated 
to caching schemes (compensating for DRAM's slow- 
ness) due to low density and high cost while also being 
volatile. Magnetic hard disks, the nonvolatile append- 


age to DRAM and SRAM, are dense, inexpensive on a 
cost-per-megabyte basis and nonvolatile, but are slow, 
power hungry, take up a sizable amount of volume and 
are susceptible to damage from physical shock. 


Mobile computing 
designs cannot 
depend on hard 


drives as portable notebook PCs do. Volume (4" x 8 x 
0.5" or less), power (two AAs), and shock constraints 
preclude using even the 1.3" hard drives available 
today. Also, vitally important data such as credit card 
numbers 
or transactions, 
signatures, 
or checkbook 


information demands reliability of the highest order. 


Intel's ETOX III Flash Memory Cell is 30% smaller 
than equivalent DRAM cells; therefore it will closely 
track 
DRAM 
density. 
Intel's 
28F008SA 
FlashFile 


Memory can store 8 megabits, or one megabyte, of 
data. Flash memory is more scaleable than DRAM be- 
cause the flash storage cell is not sensitive to soft error 
failure, therefore it can have a more simple cell struc- 
ture. Thus as density increases and process lithography 
continues to shrink, flash memory will pace and ulti- 
mately overtake the DRAM technology treadmill. 


ROMs and EPROMs may offer lower device costs, but 
if servicing the customer or end-user is important to an 
OEM, overall system cost must be factored in. Al- 
though ROMs and EPROMs are nonvolatile, changing 
the code within them is either very difficult (in the case 
of EPROMs) 
or entirely impossible (in the case of 
ROMs). Whole inventories of ROMs could be lost in 
the event of a catastrophic bug, while an innovative 
design with FlashFile memory can be updated in the 
factory or by end-users via networks, OEM Bulletin 
Board Systems, or other memory cards. Updating sys- 
tems could actually become a second source of income 
for OEMs and Independent Software Vendors, enhanc- 
ing the quality of the product while increasing end-user 
satisfaction. 


Intel's FlashFile memory provides a deep powerdown 
mode, reducing power consumption 
to typically less 


than 0.2 p..A.Typical read current is only 20 mA while 
typical standby current (flash memory not being ac~ 
cessed with CE# 
high) is only 30 p..A. Additionally, 
FlashFile devices operating at 3.3 Vcc are available for 
state-of-the-art low power consumption designs. 


Don't 
be misled by technology-to-technology 
speed 


comparisons. Architecting a system around FlashFile 
memory bypasses the code/data. bottleneck created by 
connecting slow mechanical selrial memory (such as 
disks) to a high-performance, parallel-bussed processor 
system. For example, data seek t,lmefor a 1.8" magnet- 
ic hard disk is 20 ms, plus an 8 ms average rotational 
delay, while flash memory acoess time is less than 
0.1 ms. At the chip level, read speeds for FlashFile 
memory are about 85 ns. Therefore, either direct execu- 
tion of code from flash memory or downloading to sys- 
tem RAM will dramatically 
enhance overall system 


performance. 


Unlike DRAM or SRAM, FlashFile memory requires 
no battery backup. Further, Intel's flash devices retain 
data typically for over 100 years, well beyond the useful 
lifetime of even the most advanced computer. 


On average, today's hard-disk dlrivescan withstand up 
to 10 Gs of operating shock; Intel's FlashFile memory 
can withstand as much as 1000 Gs. FlashFile compo- 
nents can operate beyond 70"C while magnetic drives 
are limited to 55°C. Intel's Fla:;,hFile Memory can be 
cycled 100,000 times per block or segment. Even be- 
yond that cycle level, FlashFile does not fail or lock up 
like EEPROM devices, it just t,ends to take longer to 
erase blocks and program bytes than the times specified 
in the data sheet. By employiJlg wear-leveling tech- 
niques, a 10 KB file written every 5 minutes, 24 hours a 
day to a 20 MB flash array tak,:~ 1.2 million hours or 
136 years before reaching the W,OOO cycle level. 


Many applications benefit. from ROMed or XIP ver- 
sions of code, particularly hand held personal comput- 
ers, vertical application pen-based clipboards, and in- 
dustrial 
control 
and data 
acc' mulation 
equipment. 


These applications pose system design constraints re- 
quiring small form factor, low power consumption, and 
ruggedized construction due to rctive mobile users or 
harsh environments. Exposure to shock, vibration, or 
temperature extremes is common, precluding the use of 
rotating media. Flash memory provides an excellent 
code storage choice for such system designs featuring 
thin TSOP packaging, low (deep.powerdown mode) or 
zero (capability to shut off pow,::rwithout losing data) 
power consumption, and 1000 G shock resistance and 
extended 
temperature 
products. 
Additionally 
flash 


memory provides remote or end··userupdate capability 
over ROMs, allowing OEM's to service their products 
more efficiently and add new sojitware features and ap- 
plications after the sale. 


new, compact and portable system architecture. This 
application note discusses implementing just such a de- 
sign using Intel's boot block flash memory and Intel's 
FlashFile (28F008SA) components for extended memo- 
ry eXecute-In-Place (XIP) code store, disk-like func- 
tionality for file and program storage, and BIOS code 
storage. 


The following data books and reference manuals pro- 
vide valuable information 
for developing an RFA- 
based design: 
• Intel 28F008SA Data Sheet Order number 290429 


• Microsoft MS-DOS 5.00 ROM Technical Specifica- 
tion and OEM Adaptation Kit (OAK) 


• Microsoft Flash Filing System OAK 
• Microsoft Windows 3.1 ROM Technical Specifica- 
tion and OAK 


For additional information on flash memory, power 
supply solutions and EPLDs, see Appendix A. 


Software design is considered first for solid-state de- 
signs because the software functionality desired affects 
in large part how the hardware design is implemented. 
Many software products exist for solid-state systems: 


• DOS operating systems from Microsoft, Novell's 
Palm DOS and Datalight's ROM-DOS 
• A Graphical User Interface (GUI) operating system 
in Windows 3.1 ROM version 


• Application 
software 
from 
Microsoft 
(such 
as 
Word, Excel and MS-Works) and Lotus 1-2-3 Ver- 
sion 2.2. 


Because no standardization exists, implementation dif- 
fers from package to package or vendor to vendor. 
Therefore, this application note describes a system us- 
ing MS DOS ROM Version, MS Flash Filing System, 
Windows 3.1 ROM Version plus Pen extensions. All 
are readily available applications today and offer the 
highest inter-compatibility. However, the hardware and 
software design concepts presented here work just as 
well with Novell's (formally DR!) Palm DOS and also 
GO Corporation's Penpoint operating systems. 


The first decision one must make for a solid-state soft- 
ware design is the operating system. Many alternatives 
exist for small hand held computer systems. Any solu- 
tion depends on what requirements are placed on desk- 
top compatibility, software compatibility, and ease of 


compatibility is not necessarily a requirement. This is 
evident by the multiple emerging entries of pen-based 
GUI's. However, data transfer using a medium such as 
memory cards between desktop systems and hand held 
computers depends on an agreed file format. At least 
for now, DOS is still the major operating system of 
choice for the largest number 
of desktop systems. 


Therefore, DOS compatibility is still a necessity for 
many hand held computing systems and is incorporated 
in this design. 


To insure compatibility and easy system integration, 
MS DOS 5.0 ROM Version is the easiest choice. With 
this version, an XIP DOS implementation can be con- 
figured to as small as 64 KB using just the Runtime 
Kernel 
and 
a minimized 
command 
interpreter. 
If 


CONFIG.SYS and AUTOEXEC.BAT processing is re- 
quired, an additional 56 KB are required plus a ROM 
DISK 
large 
enough 
to 
hold 
AUTOEXEC.BAT, 


CONFIG.SYS, and any drivers and files that are refer- 
enced by either me. 


Microsoft provided the capability for additional XIP 
DOS applications to be added to an MS DOS XIP im- 
plementation by providing two new DOS functions, 
"Find First ROM Program" 
and "Find Next ROM 
Program." 
This allows DOS-based XIP applications 
(such as OEM-specific utilities and applications or Em- 
bedded DOS applications) to easily be added to the MS 
DOS 5 ROM build. 


Many different memory configurations MS-DOS ROM 
are possible by distributing various software pieces (Mi- 
crosoft refers to them as granules) between different 
ROM locations below and above the I MB address 
space. certain restrictions exist on individual granules 
requiring them to appear below I MB. The granules 
and address location requirements are specified in a ta- 
ble within the MS DOS ROM 5.0 OAK. Approximate- 
ly 43 KB of granules must be located below the first 
I MB of address space. Other granules can be located 
either below or above I MB. The total size of all gran- 
ules in this design is approximately 128 KB. 


For system startup and booting DOS without a disk, 
MS DOS 5 ROM must intercept the INT 19h call made 
by the BIOS. This is accomplished by locating a gran- 
ule as an adapter ROM within adapter space (COOOOh- 
EFFFFh). This granule contains the ROM scan identi- 
fier "55AAh" which must appear on a 2 KB boundary 
and identifies the module as a ROM to the BIOS dur- 
ing Power On Self-Test (POST), and also identifies the 
MS DOS 5 ROM INT 19h interceptor. When the BIOS 
Post code identifies the ROM, control is turned over to 
the ROM for its initialization. At this time, the MS 
DOS 5 ROM redirects the INT 19h vector to the MS 
DOS 5 ROM code and control returns back to the 


BIOS POST code. When the BIOS is completely fin- 
ished testing and initializing, it issues INT 19h, and the 
MS DOS 5 ROM INT 19h handler gains control. The 
handler loads the MS DOS 5 ROM bootstrap loader 
into RAM and passes control to it. If the bootstrap 
loader includes the "Multi-Boot" option, a list of menu 
boot options are presented to the user if an OEM de- 
rmed key is being pressed. The menu might look like 
Figure 2. 


Booting 
from a disk: 


1. 
Boot from Floppy 
Disk. 


2. 
Boot from Hard Disk 


Booting 
from 
ROM: 


3. 
Floppy 
is default; 
process 
startup 
files. 


4. 
Hard drive is default; 
process 
startup 
files. 


5. 
Floppy 
is default; 
do not process 
startup 
files. 


6. 
Hard drive is default; 
do not process 
startup 
files. 


7. 
ROM drive is default; 
process 
startup 
files. 


The menu is activated by pressing the ALT key during 
the system memory scan, which is the default provided 
in the OAK. Other types of keys may be selected by the 
OEM for their specific implementation. Selecting the 
options under Booting from a disk will bypass the 
ROM system completely. Selecting the options under 
Booting from ROM will invoke MS DOS 5 ROM and 
whatever the option specifies for processing the startup 
files, CONFIG.SYS and AUTOEXEC.BAT. 


If the Multi-Boot option is not available or is not acti- 
vated by the user, the MS DOS 5 ROM bootstrap load- 
er reads a byte from CMOS RAM to determine boot 
options. The byte is defined in Figure 3. 


Default 
Boot 
Bit 0: 


0- Boot from ROM 


1- Normal 
disk boot operation 
(first is drive 00, then drive 80) 


ROM Configuration 
Processing 
Bit 1: 


0- Process 
CONFIG.SYS 
and AUTOEXEC.BAT 
from default 
drive 


1- Do NOT process 
CONFIG.SYS 
or AUTOEXEC.BAT 
files 


Default 
Drive if ROM Boot Bits 2 & 3: 


00- 
First Floppy 
Drive (Oh) 


01- 
First Hard Drive (80h) 


10- ROM Drive 


If the system is to boot from ROM by either selecting 
the Multi-Boot option or reading the CMOS byte, the 
MS DOS 5 ROM bootstrap loader loads BIOS (note: 
not system BIOS, but the BIOS layer of MS DOS) and 
DOS initialization granules into RAM, records the ad- 
dresses of the resident BIOS and DOS code granules in 
the BIOS data area, records boot options (default drive, 
CONFIG.SYS & AUTOEXEC.BAT processing) in the 
BIOS data area, and passes control to BIOS initializa- 
tion. Just before the end of BIOS initialization, control 
is passed to SYSINIT which moves itself and DOS data 
and initialization code to high memory where both 
SYSINIT 
and DOS initialization 
takes place. Next 


SYSINIT then reads and processes the CONFIG.SYS 
fIle where installed drivers called in CONFIG.SYS and 
additional elements of the DPB chain will be placed in 
memory following the existing DOS structures as well 
as system buffers allocated. At this point, system boot- 
strap is finished and the command interpreter is started 
using the DOS call to execute ROM utilities. If a full 
command processor is chosen, the user will now see 
"C: >" prompt. 


For this particular implementation, a full version of MS 
DOS with the full Command processor was chosen. 
This configuration uses 64 KB of adapter space (upper 
memory) at EOOOOhto EFFFFh 
fqr MS-DOS 5 ROM, 


and a combination 64 KB XIP binary file and a 256 KB 
ROM Disk binary file located in extended memory at 
F90000h. See Figure 4. ROM DOS and ROM Disk 
Memory Maps. This location isjust after the end of the 
XIP GUI code block. The 64 KB XIP Binary contains 
the transient portion of COMMAND.COM 
and the 


DOS BIOS initialization and is created during the build 
of the MS DOS 5 ROM system, while the 256 KB 
ROM Drive contains the necessary files for bringing up 
the system and loading the MS Flash File System driv- 
ers which is addressed in the next section. 


ISA Address 
Map 


rrrrrh 


The EOOOOhsegment was chosen because it happens to 
be free on the flash BIOS storage chip. Also, later on in 
this design we will be adding an RFD, which uses up 
the whole DOOOOhsegment, and ExCA which requires 
16 KB of adapter space that we located at CCOOOh(see 
Figure 4 for a memory map). The ROM disk image 
location was chosen because there was room available 
in the extended XIP portion. The XIP portion is locat- 
ed at COOOOOh(12 MB) due to compatibility reasons 
with the 386SL processor and SL window constraints. 
In a non-SL design, the ROM disk portion of MS DOS 
ROM can be located anywhere in extended memory 
above 1 MB. 


A copy of the ROM image description file is included 
in Appendix B. The following summarizes the steps 


1·16 MB ISA Address 
Map 


rrrrrrh 


taken for building a ROM version of DOS is taken 
from the MS-DOS 5.00 ROM OAK. Please refer to the 
MS-DOS 5.00 ROM OAK for specific details. 


There are a set of compile options specified in the MS 
DOS 5 ROM OAK that need to be defined by the 
OEM for their particular implementation and are con- 
tained in the OAK file named "VERSION.INC". 
The 


compile options used for this example are listed as fol- 
lows: 
• 


ROMDOS equ TRUE 
POWER equ FALSE 
ROMDRIVE equ TRUE 
CMOS equ TRUE 
CONFIGPROC 
equ TRUE 


For this application this means that for: 
"ROMDOS" 
- 
a ROMDOS build (as opposed 
to DISK 
build simulation) 
is 
used 
"POWER" 
- 
the MS DOS APM and power 
management are NOT used 
"ROMDRIVE" 
- 
the compiler will use the internal 
ROMDRIVE drivers 
"CMOS" 
- 
forces MS DOS 5 ROM to look 
at the CMOS byte if the Multi- 
Boot option is not chosen 
"CONFIGPROC" 
- 
normal CONFIG.SYS and 
AUTOEXEC.BAT 
processing 
will be used 


Since we are planning to use a ROM DRIVE, MS DOS 
5 ROM needs to know where the ROM DRIVE exists. 
To set the ROM drive base address, the MS DOS 5 
ROM OAK file ROMRDHI.ASM 
must be modified. 
Edit the file and set the ROMDRIVERBASE_LO 
equal to OOOOhand the ROMDRIVERBASE_HI 
equal to OFAh, or 64 KB above the base address of the 
extended memory XIP module. 


Now the MS DOS ROM binaries are ready for build- 
ing. Using the MS NMK utility, 3 separate binary files 
are compiled based on the requirements and addresses 
specified in the MS-DOS ROM Image Description file 
in Appendix B. ROM binary files 1 and 2 can be com- 
bined into one 64 KB binary image as follows: 


Once the XIP binaries are built, the rest of the ROM 
disk needs to be built. First, specify a RAM Drive with- 
in your build or development PC using the MS DOS 
RAMDRIVE.SYS device driver as follows: 


After rebooting your PC, copy the files needed for your 
particular 
application. 
For 
an 
example 
of CON- 
FIG.SYS and AUTOEXEC.BAT 
files, see Appendix 
C. Change the drive label as per the MS DOS 5 OAK 
instructions and then use the MS DOS IMGET utility 
to capture the image of the RAM drive into a binary 
file. Next, concatenate the ROM3.BIN binary image 
created by the NMK with the ROM Disk image cap- 
tured from the RAM drive by using the MS DOS copy 
command as stated earlier: 


copy /b ROM3.BIN + RDISK.BIN ROMDSK.BIN 
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This will create a 327 KB binary file with both XIP 
DOS code and the ROM Disk code for a single load 
into flash memory. 


Loading the ROMDOS5.BIN 
file into the system's 
flash BIOS chip requires the use of a BIOS Independent 
Software Vendor's (ISV) Flash Update Utility. Most 
major BIOS ISVs now offer such utilities. If your par- 
ticular system design uses a BIOS developed internally, 
refer to Intel's AP-341 "Designing an Updatable BIOS 
Using FLASH Memory" (order number 292077) for 
more information on flash BIOS designs and related 
software. 


Loading the ROMDISK.BIN 
file requires developing a 
DOS-based utility to access flash memory in Protected 
Mode. Creating this utility is discussed under Section 
4.0, Software Utilities, subsection 4.2 Binary Loader. 


Once a DOS-based, XIP operating system is in place, 
the next area to work on is file storage for flash memo- 
ry. File storage is possible with either FlashFile compo- 
nents or FlashFile cards, since they appear the same to 
file system software. However, the characteristics 
of 
flash memory are very unlike magnetic storage media 
characteristics. File Allocation Table (FAT)-based sys- 
tems rely on the fact that the operating system has un- 
restricted write capability and! or access to the media, 
particularly when updating the FAT for a file creation, 
update or deletion. Flash memory on the other hand, 
does not necessarily allow write access 100% of the 
time. When the flash memory media is completely 
erased (all FFh's), writing data to the media can occur 
at any time and at any location. Additional data writes 
within the same block but at different locations can also 
occur. However, once a bit is written to a zero (Ob), 
erasure of the whole block is required before allowing 
that particular bit to change back to one (lb). This 
asymmetrical characteristic of flash memory prevents 
using a straight implementation of the FAT-based file 
architecture and requires an alternative file system im- 
plementation to take advantage of Flash Memory bene- 
fits. 


Intel's FlashFile memory offers 64 KB separately eras- 
able blocks enhancing the use of flash memory as a file 
storage medium. The large block size (as opposed to' 
512 byte blocks or sectors) provides the system with 
fewer total blocks to manage, resulting in less system 
overhead used for file management. Additionally, large 
blocks reduce file fragmentation since large files will 
most likely be contained in one block as opposed to 
several 512 byte sectors. This reduced fragmentation 
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file system. These features led to the creation of Micro- 
soft's Flash Filing System. 


To enhance the use of flash memory as a disk, Micro- 
soft created the Flash Filing System. This file system 
operates as a list of linked lists while keeping track of 
individual block erasure and file deletions, using mini- 
mal system overhead. File allocation structures use in- 
directly linked lists, allowing the file system to update 
files and data within the files without first requiring the 
area where the file is located to be erased and then 
updated. During file deletion, a file's header structure is 
written to mark the file as deleted, removing the file 
from the file allocation listing. Once the array of flash 
memory contains a majority of deleted files, the file 
system performs a (background) cleanup operation and 
copies good files out to free blocks and erases the blocks 
with all the deleted files. This achieves the goal of the 
user being able to use flash memory the same as they 
would use any other mass storage media without doing 
anything different. 


Three distinct parts comprise the file system organiza- 
tion and implementation: 


A File System Redirector, whose job is to intercept 
the disk operations passed to MS DOS by an appli- 
cation and translate them into generic file opera- 
tions, passing them on to the file system driver. 
A File System Driver, which accepts generic file 
operations passed to it from the File System Redi- 
rector, implements the architecture and logic of the 
Microsoft Flash Filing System, and passes low-level 
commands such as read, write, copy, and erase to 
the device driver. 
A Device Driver, which accepts low-level com- 
mands from the File System Driver and interfaces 
to the host system hardware implementation. 


The File System Redirector performs a task analogous 
to a network redirector for LAN (Local Area Network) 
systems and appends itself to MS DOS. Any applica- 
tions then think they are running from a networked file. 
Some classes of applications and utilities will not oper- 
ate via this interface. Specifically, those applications 
that issue the INT 13h disk BIOS I/O call, INT 25h 
DosAbsRead, or INT 26h DosAbsWrite calls will not 
work properly with the Flash Filing system, just as they 
would not work over a network LAN. The File System 
Driver treats the flash media as a collection of large 
blocks, all identical in size. Individual block statistics 
are kept within a variable length structure at the top of 
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storage. 
The File System Driver also determines when de-allo- 
cated space (deleted files or directories) within a block 
is reclaimed for re-use. 


The device driver portion is OEM-modifiable and needs 
to be written for the specific hardware example used. 
This device driver, specifically called iCARD29, is cov- 
ered in more detail in the next section, ExCA Architec- 
ture, under iCARDDRV File System Driver Summary. 
The only MS FlashFile System hardware requirement 
is a single window available per socket in a system's 
adapter space that addresses all the flash memory to be 
used. Window size and base address are left to the sys- 
tem designer to decide, based on system design require- 
ments. Some hardware guidelines are: 
• Register-defmed window size of either 4 KB, 8 KB, 
16 KB, or 32 KB 
• Register-defined 
base 
address 
in 
adapter 
space 
(COOOOhto DFFFFh) 


For more detailed information on Microsoft's Flash 
Filing System, consult the Microsoft Flash Filing Sys- 
tem OAK. 


2.4 
Resident Flash Disk (RFD) and 
ExCA Architecture 


Many systems which use an RFA will also want to 
incorporate PCMCIA memory and I/O cards. If an 
RFD 
uses the same software architecture 
used for 
PCMCIA cards, less software duplication is present in 
systems containing both cards and RFDs. This section 
discusses the Intel Exchangeable 
Card Architecture 
(ExCA) as it applies to an RFD and a Flash Filing 
system. 


Most of this section was excerpted from the ExCA 1.1 
Specification. The reader is encouraged to obtain that 
document for more details not revealed in this discus- 
sion. Other documents are the PCMCIA 
PC Card 
Standard Release 2.0, the PCMCIA Card Services In- 
terface Specification, and the PCMCIA Socket Services 
Interface Specification Release 2.0. 


ExCA specifies a standard host system hardware and 
software interface for 68 pin, PCMCIA/JEIDA 
memo- 
ry and I/O cards. ExCA Release 1.10 defines the mini- 
mum hardware and software interfaces that card and 
system designers can rely on for basic compatibility 
across PC Cards, systems, and related software. By de- 
fming these interfaces, ExCA makes the PCMCIA goal 
of PC Card inter-operability a reality. 


• 


The primary purpose of the ExCA Software Interface is 
to explicitly define a minimal set of socket control and 
resource access functions upon which higher-level PC 
Card Client device drivers can rely. A PCMCIA imple- 
mentor may incorporate a range of functions beyond 
the basic Memory Card Interface specified in PCMCIA 
1.0. For PCMCIA 2.0, three primary functional exten- 
sions to the specification exist. They are: I/O devices, 
L-XIP-mapped memory ("L" stands for LIM or Lotus, 
Intel, Microsoft), and E-XIP-mapped 
memory ("E" 
stands 
for Extended 
or Protected 
mode memory). 


While basic memory requirements can be met with a 
single, small memory-mapped window or even via an 
I/O approach, both XIP modes require direct-mapping 
interface capability, with very specific boundaries in the 
L-XIP mode. Without 
an ExCA-like hardware 
and 


software support for direct-mapped memory, XIP-for- 
matted cards cannot function. The ExCA socket hard- 
ware and software specifications define basic, clear 
compatibility definitions for PC cards, software drivers, 
and host systems. 


ExCA allows PC Cards and sockets to be accessed by 
multiple PCMCIA-aware device drivers, configuration 
utilities and applications, with efficient and non-con- 
flicting use of system resources. An architectural dia- 
gram of ExCA functionality is shown in Figure 5. The 
primary components of the software interface are Sock- 
et Services and Card Services. Socket Services provides 
the lowest-level function set for socket hardware adapt- 
er control. Card Services allocates resources and coor- 
dinates PC Card-related activities for higher-level client 
device drivers. 
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Figure 5. By using the same software architecture 
used 
for PCMCIA cards, less software duplication 
is present in systems 
containing both cards and Resident Flash Disks. 


ExCA Socket Services is the lowest-level software inter- 
face that directly controls PC Card sockets. Socket 
Services defines a software interface to manipulate 
socket adapter hardware in a way that is independent of 
hardware implementation. Socket Services defines sev- 
eral abstract resources which can be manipulated. An 
Adapter is the hardware that supports connecting one 
or more 68-pin PCMCIA Sockets to a host system, or 
in the case of a resident flash disk, the hardware that 
supports a memory interface only. A Socket is the 
hardware that supports a single 68-pin PCMCIA con- 
nector. A Window is the hardware that supports map- 
ping a region of system memory or I/O address space 
to a region of card memory or I/O address space. A 
Card is a PCMCIA card that is inserted into a socket. 
Example functions are: configure a socket for an I/O or 
memory interface, control socket power voltages and 
make callbacks for PC Card insertion and status chang- 
es. 


Socket Services handlers use minimal RAM so that 
they will fit within a ROM-BIOS. The Socket Services 
interface can be used during POST, and must be ROM- 
resident to support booting from a PC Card. The inter- 
face is accessed via an 8086-compatible register-based 
protocol, and invoked through software interrupt IAh, 
with functions starting at 80h. This interrupt is shared 
with the real-time CMOS Clock Driver. The Socket 
Services software interrupt is called with the proper set- 
tings in the host processor's registers. The functions 
returns status via the Carry flag and registers specific to 
the function invoked. 


Multiple hardware 
socket adapter 
interfaces can be 
supported by chaining multiple Socket Services han- 
dlers. This includes providing Socket Services support 
for motherboard-resident flash memory arrays by treat- 
ing the control circuitry and memory array as if it were 
a PC Card single socket/card combination. 


Card 
Services is the interface 
used to manipulate 
ExCA-related system resources. Card Services is sub- 
divided into five functional categories: Client Services, 
Resource Management, Client Utilities, Bulk Memory 
Services, and Advanced Client Services. Client Services 
provide for client initialization and the callback regis- 
tration of clients. Resource Management provides basic 
access to available system resources, combining knowl- 
edge of the current status of system resources with the 
underlying Socket Services adapter control functions. 
Client Utilities perform common tasks required by cli- 
ents so that functions, such as CIS (Card Information 


Structure) tuple access, do not need to be duplicated in 
each of the client device drivers. Bulk Memory Serv- 
ices provide read, write, copy, and erase memory func- 
tions for use by file systems or other generic memory 
clients that need to be isolated from memory hardware 
details. Advanced Client Services provide specific func- 
tions for clients with special needs. 


Card Services provide a packet-based request interface 
(i.e., uses a block of RAM for passing inputs and out- 
puts between the caller and the interface) which pro- 
vides a standard protocol for PC Card client device 
drivers to access cards and their required system re- 
sources. It provides separate registration and callbacks 
for card insertion and card status change event notifica- 
tions, allowing associated client device drivers to take 
the appropriate 
actions. For file system read, write, 
erase and copy operations, a special interface is provid- 
ed for Memory Technology Drivers (MTDs) which can 
handle the details of different memory technologies. 


NOTE: 
This interface is not used by iCARD29. Instead, the 
MTD functions are built into iCARD29. 


Resource Management provides a protocol for sharing 
resources within an environment, where previously the 
end-user was responsible for resolving resource con- 
flicts. Resource Management resolves resource conten- 
tions without end-user interaction. 


Advanced Client Services contains a ReturnSSEntry 
function which is essentially a direct bypass to Socket 
Services. Card Services require Socket Services to ma~ 
nipulate PC Cards and socket hardware. ExCA client 
drivers should typically interact 
directly with Card 
Services and not Socket Services. 


Card Services is typically implemented as a device driv- 
er. Card Services provides function number AFh in the 
Socket Services interrupt 
IAh interface for real-mode 
operation. During initialization, Card Services deter- 
mines the state of the host environment. This includes 
determining available system memory, available I/O 
ports, IRQ assignments, installed PC Cards and socket 
state. How this is performed is implementation specific. 


iCARDRV2.EXE is an Intel developed,low-level, flash 
memory driver for the MS Flash Filing System. It pro- 
vides read, write, copy, and erase functions within the 
ExCA architecture and interfaces to a PCMCIA stan- 
dard Card Services 2.0 (which provides proper resource 
arbitration). 
iCARD29 is completely independent of 
other peer level drivers and performs no direct calls to 


Socket Services. Support for Intel's Series I and Series 2 
flash memory cards and the RFA flash disk is provid- 
ed. iCARD29 is also used to read ROM cards and 
read/write SRAM cards. 


RFD 
"SocketServices" 
functions 
similar 
to 
ExCA 
SocketServices in that the software interface to manipu- 
late socket adapter hardware is preserved, but an RFD 
SocketServices does not control any sockets or cards or 
respond to card removal and insertion events. RFD 
SocketServices allows a resident flash disk implementa- 
tion, through chipset logic or external logic, to appear 
to ExCA software and the system as another Adapter 
using a single Window mechanism, accessing perma- 
nently installed flash memory on a motherboard. All 
the rest of ExCA SocketServices functions are kept as 
they relate to this definition. An example of a non- 
working RFD SocketServices function is using it to 
configure an I/O card. If requested to complete such an 
operation, 
RFA 
SocketServices 
will respond 
with 
"Function not supported." 


For more information on the specific hardware design 
used for a Resident Flash Disk, refer to Section 3.5. 


2.5 
XIP Graphical Users Interface 
(GUI) Overview 


Many GUIs exist today, but not all are configured to 
run in a minimized XIP mode for portables. Some de- 
signs may implement a simple DOS-based pen interface 
on top of an XIP DOS, like Communications Intelli- 
gence Corporation's PenDOS', 
and add a single appli- 
cation like a forms recorder. Other designs may not use 
XIP DOS at all and the system design revolves around 
the XIP GUI requirements alone. 


Microsoft leads the rest of the software industry in XIP 
GUI development, releasing the Windows 3.1 ROM 
Development Kit in September of 1992 and recently 
introducing the Modular Windows Development Kit in 
January of 1993. Both are XIP GUI implementations 
of the Windows GUI Operating System and are fully 
modularized for OEM configuration. Modularization 
assists OEMs by simplifying the streamlining of an 
O/S's 
suitability to task by allowing the OEM to 
choose which functions are important and required for 
a particular design and which functions can be left out. 
Benefits to the OEM are: 


Preserved API for using existing Windows applica- 
tions or new application development 
Reduced development time and costs by using stan- 
dard Windows application development tools and a 
wide choice of Windows software developers 
- 
Ease of use for end-user 


Microsoft's Modular Windows Operating System uses a 
subset of the Windows 3.1 Operating System and in- 
cludes 
extensions 
supporting 
TV-based multimedia 
players. Target 
market 
is home entertainment, 
but 
could easily be adapted for machine control on factory 
floors. The differences between Modular Windows and 
Windows 3.1 ROM are summarized below: 


Reduced support for the Windows 3.1 application 
programming interface (API) 
Reduced support for Windows 3.1 extension librar- 
ies 
New user-interface controls (instead of pull-down 
menus) 
New support for hand-control input devices 


Software requirements are: 


• MS DOS 5.0 in XIP form 


System requirements are: 


• 80286 or greater CPU 
• 
I MB RAM minimum 
• I MB of XIP memory (Flash, EPROM, or ROM) 


Since the focus of this application note is personal com- 
puters, Sub-Notebooks and below, Modular Windows 
implementations will not be discussed. However, many 
of the principles of putting Modular Windows code in 
flash memory (memory maps, software tools, flash up- 
datability, etc.) are the same here as the Windows 3.1 
ROM example which is discussed later in this section. 


Computers running Windows in ROM or XIP mode 
are very similar to standard 
PC running disk-based 
Windows. The only major exception is the presence of a 
large amount of XIP code storage in extended memory 
from which Windows executes, and a smaller amount 
of XIP code storage in adapter space. For the rest of 
this discussion, the Windows XIP code stored in ex- 
tended memory is referred to as HIROM.BIN 
and the 
small amount of Windows XIP code stored in Real 
Mode space is referred to as LOROM.BIN. 


Two modes of operation are possible for XIP Windows; 
Standard and Enhanced, just as on disk-based PCs. 
However, each require different system resources for 
the XIP Windows version. 


For Standard Mode, Windows executes fully in ROM, 
leaving almost all the system RAM available for user 
programs. This means that all Windows "core code" 
including DOSX.EXE, 
USER.EXE, 
GDI, 
the Win- 


dows kernel and all drivers run from XIP storage 
space. Also, all shell programs, applets, fonts and other 
Windows resources are stored in and run from XIP 
storage space without being loaded into RAM. 


Enhanced Mode Windows must execute partially from 
RAM. 
Enhanced 
Mode 
components 
such 
as 
WIN386.EXE and VxDs (virtual device drivers) must 
be loaded into RAM from some type of disk (a flash 
disk, ROM disk, or flash card) for execution, as their 
code writes back to their execution location from time 
to time and creates errors if loaded into XIP code stor- 
age such as flash memory. Components shared between 
modes, specifically USER.EXE, GDI, the kernel and 
drivers, continue to run from their stored locations in 
XIP address space. 


Additionally, for either Standard or Enhanced modes, 
all Windows 3.1 features are supported in XIP Win- 
dows. The only limiting factors are the amounts of 
available RAM, XIP storage and, in the case of En- 
hanced mode, disk space. 


The Windows 3.1 ROM Development Kit (RDK) can 
add any Windows executable program or application 
into the main XIP binary image file HIROM.BIN. The 
application must conform to the XIP application re- 
quirements 
specified in the Windows 3.1 Technical 


Specification. Microsoft is capable of supplying XIP 
versions of Word for Windows, Excel, Microsoft Mail 
and Microsoft Works but must be developed between 
an OEM and Microsoft on a platform-by-platform ba- 
sis. 


Once the O/S and application functionality is deter- 
mined and the build script CONTENTS. ROM edited, 
the 
RDK 
produces 
two binary 
images: the 
large 


HIROM.BIN 
Extended mode image containing O/S 


and 
application 
code, 
and 
the 
small 
Real 
mode 


LOROM.BIN 
image containing the listing of all the 


XIP code contained in HIROM.BIN. 
After both XIP 


Windows binary files are loaded into flash memory and 
the system is up and running, clicking on an application 
causes the XIP Windows kernel to search its internal 
listing (LOROM.BIN) for an XIP image module first. 
If the image is not found within the XIP listing, the 
Windows kernel then searches the file paths present at 
runtime to try and load the application from its current 
file directories. 
If the program is not found within 


file directories, 
XIP Windows returns 
"Application 


missing, file not found." Additions of other extensions 
to the XIP image such as multimedia support and Pen 
Windows are added in a similar manner. 


As mentioned earlier, XIP Windows requires two mod- 
ules; a small amount of XIP storage in device adapter 
space called LOROM.BIN, and a larger amount of XIP 
storage 
called 
HIROM.BIN 
in 
extended 
memory 


space. The LOROM.BIN 
file contains 
information 


about the modules loaded in the HIROM.BIN XIP (see 
Figure 6) image and must be accessed in real mode by 
three 
modules, 
WIN. COM, 
RSWAP.EXE, 
and 


WIN386.EXE. Additionally, portions of the DOS ex- 
tender (DOSX.EXE) must be able to run in real mode 
and are therefore located in the LOROM.BIN 
XIP 


image. The information the three modules look for is 
contained in the ROM Table Of Contents (ROMTOC), 
also located in LOROM.BIN and contains general in- 
formation about both XIP images (small and large), 
entry point addresses for initialization, and a list of the 
executables stored in the large XIP image. 


The extended memory XIP image contains the bulk of 
the system's code and data segments, EXE headers, and 
a prototype Local Descriptor Table (LDT) which is a 
data structure,defining the addresses, sizes and types of 
segments used by 80286, Inte1386™, or Intel486TM 
processors. For more information on a Windows 3.1 
XIP-based system, please refer to the Microsoft Win- 
dows 3.1 ROM Development Kit. 


• Software Utility to load both small and large XIP 


images into flash memory 


• For Enhanced Mode disk space requirements, MS 
Flash Filing System 2.0 combined with ExCA soft- 
ware for a Resident flash disk. 


System 
Requirements 
• 80286 CPU or greater 
• RAM: Minimum of I MB for Standard Mode or 
2 MB for Enhanced mode 


• XIP Store: Minimum of 2 MB for Standard Mode, 


3+ MB for Enhanced mode 


• Flash Disk Store: Zero for Standard Mode, 2 MB 
for Enhanced mode 


For this particular 
design example, Enhanced mode 
functionality is used to show a full implementation of 
Windows. An RFD 
is used to load WIN386.EXE, 
VxDs and all the o.INI and o.GRP meso A complete 
listing of the CONTENTS. ROM file used by the Win- 
dows ROM Image Builder utility to create an XIP 
Windows system is shown in Appendix D. The Win- 
dows RDK Enhanced Full sample CONTENTS.ROM 
me is used as a template and edited to locate the 
LOROM.BIN file at C8000h and is a total of 16 KB. 
The HIROM.BIN 
file is located at COOOOOhand is a 


total of 3.6 MB. 


Microsoft's Windows for Pen Computing is an exten- 
sion to Microsoft Windows version 3.1 and has its own 
SDK: Pen Windows Extensions do not require any 
changes to existing Windows 3.1 applications and a se- 
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tem. In particular, the Wacom PL-IOOVpen tablet and 
VGA graphics card can be added to an ISA bus slot for 
early debug and pen software development. 


All the Pen Windows extensions are directly executable 
within the HIROM XIP image and can be added to the 
CONTENTS. ROM listing. 


This section describes the general hardware require- 
ments for an RFA design, then discusses a specific im- 
plementation using the SL architecture as an example 
(primarily due to the built-in ISA Sliding Window). 
Many of the concepts presented here can easily be in- 
corporated into new chipsets designs to take advantage 
of the benefits flash memory brings to solid-state de- 
signs. 


3.1 
Resident Flash Disk 
Implementation 


As stated in Section 2.3, the MS Flash Filing System 
requires a hardware mapping window in Real Mode 
address space. This window is similar in function to an 
EMS mapping window, but unlike EMS this window 
interfaces directly to flash memory. The SL Superset 
provides an example of just such a mapping, using in 
the ISA Sliding Window. The window is configured via 
the SL's ISAWINDOW register and has a fixed base 
address of DOOOOhand a fixed size of 64 KB. By setting 
the correct address in the register, the full 16 MB ISA 
address space is viewable in 64 KB increments. Addi- 
tionally, the register defines access to the 16 MB flash 
disk address space made available by a separate flash 
disk Chipselect (see Figure 7). 
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Figure 7. Flash Disk Mapping 


Although the built-in functionality of the ISA Sliding 
Window is quite nice, the large 64 KB footprint of the 
window in Real Mode address space is difficult to work 
around. For a non-SL implementation, smaller, more 
flexible sliding windows are possible through external 
logic (FPGAs or EPLDs) or hopefully from future PC 
chipsets desiring to provide the capability the flash 
memory offers. The hardware requirements are simply: 
1. A Window base address that appears in Real Mode 
memory somewhere in adapter space (COOOOhto 
DFFFFh) 
that is also register definable. 


2. A Window size that is also register definable for 
either 4 KB, 8 KB, 16 KB, or 32 KB. 


These two options provide a level of flexibility for an 
OEM's system implementation and reduces the memo- 
ry footprint in adapter space. 


The flash disk address mapping in Figure 7 shows the 
flash disk and ISA bus address maps together. The SL's 
ISA Sliding window allows 64 KB blocks of the flash 
disk address space to be mapped into the Real mode 
area from DOOOOhto DFFFFFh 
for access by the MS 
FlashFile System. For some ideas on how to implement 
an external logic flash disk implementation, see AP-343 
"Solutions for High Density Applications Using Intel 
Flash Memory," order number 292079. The application 
note describes a complete design for an ISA Bus add-in 
card. A local bus design can be derived from the ISA 
Bus implementation 
or the SL implementation 
logic 
discussed in Section 3.6, Schematic Overview. 


As stated in Section 2.2 DOS in Flash Implementation, 
MS DOS 5.0 ROM 
Version is built assuming the 
EOOOOhsegment location and also consists of a ROM 
Disk located in extended memory at F90000h. The only 
reason for the ROM disk location is to avoid 386SL co- 


processor errata at the 8 MB location and window base 
address constraints, which must be divisible by the win- 
dow size in use. In non-SL designs, the ROM Disk can 
be located anywhere above 1 MB in a NON-cacheable 
region. 
The 
design 
example 
uses 
Intel's 
2 
Mh, 


28FOO2BX-Tboot block flash memory. This device is 
organized with varying sized blocks; a 16 KB hardware 
lockable boot block, two 8 KB separately erasable Pa- 
rameter Blocks, and separately erasable 96 KB and 
128 KB main code blocks. To unlock and allow pro- 
gramming and erasure of the boot block, an additional 
12V must be applied to the PWD# 
pin, thereby guar- 


anteeing hardware protection. The benefit of using boot 
block architecture 
is that in the unlikely event that 


something happens during a BIOS code update, the sys- 
tem can recover using the kernel code in the boot block 
to initialize enough of the system to access a floppy 
drive or memory card socket to load in BIOS update 
code and a BIOS binary file. 


Using a 2 Mh (256 KB) device enables the design to use 
a single memory chip for 4 separate code modules: the 
standard AT compatibility BIOS (64 KB), MS DOS 5.0 
ROM (64 KB), Video BIOS (32 KB), and Power Man- 
agement Code (32 KB). The sum of all 4 modules is 
greater than 128 KB and if mapped straight down from 
the top of the 1 MB address space, could cover both the 
BIOS and all of the adapter space. To avoid this con- 
flict, some chipset designs physically position the BIOS 
function at the top of the 16MB memory map, then use 
64 KB mapping windows to position the correct block 
between EOOOOhand FFFFFh. 


The SL Superset provides a second BIOS ROM chipse- 
lect enabling only one 128 KB portion to appear at 
EOOOOhto FFFFFh at a 'time. Additionally, the SL Su- 
perset provides an ISA Sliding Window which allowed 
windowed access into protected mode space. Figure 8 
shows how each module is mapped into the boot block 
flash memory. 
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The boot block flash memory chip is physically located 
at the top of the 16 MB address space, but the SL Su- 
perset logically locates the top 128KB of the chip into 
Real Mode address spacejust below I MB. Additional- 
ly, an exclusive OR gate is tied to the highest order 
address line, flipping the 2 Mb boot block chip at its 
mid point. This places the locked boot blockjust under 
the first 128 KB of the part, while the other 128 KB 
containing the AT System BIOS and MS DOS 5.0 
ROM appears at the top of the device. This is done to 
position the boot block (which contains BIOS recovery 
code) out of the IBM BIOS compatibility table area, 
allowing access to the AT System BIOS and MS DOS 
ROM code. 
. 


When the system boots, the processorjumps to the AT 
BIOS location by default. As the system is booting, the 
BIOS enables the ISA Sliding Window to access the 
other 128 KB of boot block flash memory, and pro- 
ceeds to copy the Power Management code to its spe- 
cial location within the System Management Mode 
space. Next, the BIOS copies the Video BIOS code into 
shadow memory at COOOOhto C7FFFh and turns off 
the ISA SlidingWindow. The BIOS then scans the MS 
DOS 5.0 ROM adapter code, and allows MS DOS 
ROM to hook INT 19h, and finishes the rest of its 
POST before turning control over to DOS by issuing 
INT 19h. 


• 
• 
• 
As stated earlier, Windows 3.1 ROM Version takes up 
about 
3.6 
MB 
of 
extended 
address 
space 


(HIROM.BIN) 
and 16 KB of Real mode adapter ad- 
dress space (LOROM.BIN). 
HIROM.BIN 
can be lo- 


cated anywhere above I MB and should probably be 
high enough above the DRAM address space to allow 
additional DRAM to be added to the system by the 
end-user. Ideally, the system design should be able to 
cache the area where the Windows HIROM XIP code 
is located. This allows the system to take advantage of 
XIP code locality since XIP code should produce a 
very high cache hit ratio. Since the 28FOO8SAFlash- 
File memory is a x8 device, x16 access is accomplished 
by pairing two devices for a LOW Byte HIGH Byte 
configuration. This creates an erasable block size of 
128 KB. 


The LOROM.BIN file has a couple of implementation 
options. One method is to use a spare block out of the 
extended memory XIP region. This method requires 
external logic to decode the specific adapter space ad- 
dress dedicated to the LOROM function, and generate 
a chipselect to the last block of flash memory. Since the 
LOROM.BIN file size is only 16 KB and the smallest 
erasable block size is 128 KB, 112 KB of the block is 
left unused. Given that the HIROM and LOROM files 
are updated together, the HIROM file could feasibly 
use the extra space if necessary. 


Another option for the LOROM file is to use some free 
storage space within the 2 Mb boot block flash memory 
chip. The file could then be copied to the correct adapt- 
er space shadow RAM location at boot time. Copying 
the LOROM.BIN file can occur at the same time that 
Video BIOS and Power Management code are copied. 
This method provides update capability while reducing 
external logic requirements. The only hinge factor is 
getting the system's BIOS code to copy the me before 
or during POST. 


Either option is possible. The choice is dependent on 
determining 
which is easier, modifying hardware or 
modifying a BIOS bootup process. 


Chipset designers interested in implementing an RFA- 
ready chipset should consider the following recommen- 
dations for RFA hardware requirements: 


Flash BIOS > 128 KByte 
• Minimally, include a Flip Bit on the highest order 


address line. This allows 128 KB pages to move in 
and out of the same 128 KB address space. 


dow mapping mechanism similar to an EMS-like 
window. This window provides temporary 
Real 


mode access of the 2nd 128 KB of BIOS code stor- 
age. 


RFD Functionality 
• Include a built-in Flash disk Chipselect to minimize 


external logic 


• Add an EMS-like mapping window 


Register defmed, base address between COOOOh 
and DFFFFh 
Register defmed window size adjustable 4 KB, 
8 KB, 16 KB, and 32 KB 
Register address capability to 64 MB RFD 


XIP Code Functionality 
• Include a built-in XIP Flash Chipse1ect 
• Add 2 register defined, cacheable windows 


Adjustable base address anywhere above I MB 
Size adjustable 2 MB, 4 MB, or 8 MB 


Lacking an off-the-shelf, RFA-ready chipset and sys- 
tem, an SL Superset design is used as an example. To 
achieve as close to local bus access times as possible, the 
SL's Peripheral Interface (PI) Bus is used. The PI Bus 
is asynchronous and runs a CPU cycles plus one addi- 
tional wait state. 


To position the FlashFile memory on the PI Bus into 
the system's address map, a spare Video Window regis- 
ter (GABCR) is used (see Figure 9). For the design 
example, a base address of COOOOOhis used combined 
with a window size of 4 MB. The COOOOOhbase address 
avoids some conflicts with 386SL systems at the 8 MB 
address location. Since the GABCRs window base ad- 
dress must be divisible by its size, the 12 MB address 
made the most sense (avoiding the 8 MB location) 
while being high enough to allow at least 8 MB of sys- 
tem RAM. For any other XIP system design, any base 
address should be usable. Although the GABCR regis- 
ter positions the FlashFile memory correctly and routes 
all 
system 
address 
map 
accesses 
to 
COOOOOhto 


FFFFFFh 
to the PI Bus, by the fact that the GABCR 


is a graphics window, it is defined as a non-cacheable 
window. 


• Include a cache enable/disable bit within the regis- 


ter 


These requirements work for non-Intel architecture just 
as well as for the Intel architecture. 


orrrrrrh 


Windows 
3.1 
, 
LORO~.BIN 
, 


rrSOOOh 
, 


Logical XIP 


Locations 
r90000h 
, 
EXECUTABLE 
, 
CODE 
AREA 
, 


"HIRO~.BIN" 
...... _- 


COOOOh 


Appendix F contains schematics for the SL Superset 
example design. This section reviews the major portions 
of the schematic. 


Even though the SL Superset provides a flash disk Win- 
dow and Chipselect, two EPLDs are needed to decode 
the flash disk Chipselect from Video Chipselects, while 
the XIP flash memory required externally generated 
chipselects. Additional logic is also needed to decode 
the LOROM.BIN stub at CCOOOhand route the access 
to the highest block of XIP Memory. 


The RFA example design uses both an Intel 85C090-l5 
and an Intel 5AC312-25 EPLD to provide board con- 


EXECUTABLE 


CODE 
AREA 


"HIRO~.BIN" 


intel~ 


trol logic. This logic generates flash memory chip en- 
ables, flash memory control signals, ROM Stub decod- 
ing, PI bus cycle decoding and bus cycle termination, 
and enables the mode registers. For details on the 
EPLD equations, see Appendix E. 


The Intel 85C090 also controls the mix between how 
much flash memory is used for Resident Flash Disk 
Memory (FDM) and how much flash Disk Memory 
(RFD) and how much flash memory is used for XIP 
Memory. The EPLD description files in Appendix E 
show how to change the equations to obtain the desired 
mix needed for any particular OEM's implementation. 


intel~ 


The 
5AC312 
provides 
two 
registers 
to control 
Vpp, 


power 
down, 
and 
the 
Ready 
Interrupt. 
The 
registers 


are written 
and read with PI Bus Memory 
cycles to the 
upper 
64 KB 
of the 
Flash 
Disk 
Address 
Plane. 
This 


space 
is otherwise 
unused; 
no 
flash 
memory 
resides 


there. 
Address 
assignments 
in the flash disk plane 
are 


as follows: 


FFOOOOh Power 
Control 
Register 
(Wt/Rd) 


FFOOO2h Interrupt 
Control 
Register 
(WtIRd) 


FFOOO4h (Reserved) 


FFOOO6h Clear 
Flash 
Disk Memory 
READY 
Interrupt 
(Wt only) 


The Clear Flash disk Memory 
READY 
Interrupt 
is not 
used 
with 
FlashFile 
System 
1.0. It is intended 
to be 
used 
with 
the 
next 
file system 
from 
Microsoft. 
The 


above 
assignments 
alias every 
8 Bytes (4 words) 
up to 
FFFFFEh. 


The Power 
Control 
Register 
bits are defined 
as follows: 


Bit 
o 


1 
2 
3 
4-15 


Enable all Flash Memory Vpp 
(if jumper E9-E1 0 installed) 
(Reserved; 
reads as a zero) 
(Reserved; 
reads as a zero) 
Power Down all flash memory 
Undefined 


The Interrupt 
Control 
Register 
bits are defined 
as fol- 


lows: 


Bit 
o 
1 
2 
3 
4-15 


Enable Flash Memory 
READY Interrupt 
Flash Memory 
READY Interrupt 
(Read only) 
Flash Memory Any Zone Busy (Read only) 
(Reserved; 
reads as zero) 
Undefined 


Reserved 
bits should be written 
as zeroes; they will read 


as zeroes. 
Undefined 
bits should 
be written 
as zeroes; 
they may read as either 
zeroes 
or ones. 


COld boot (RSTDRV) 
clears all defined 
bits in the reg- 


ister. 
Warm 
boot 
(CTRL-ALT-DEL) 
does 
not 
affect 


the contents 
of the register. 


The 
Flash 
Memory 
READY 
interrupt 
is cleared 
by 
writing 
to address 
FFOOO6h in the flash disk Address 
plane. 
The data 
written 
is not interpreted; 
it should 
be 


all zeros. 


A major 
power 
consumer 
on the RFA 
example 
design 


board 
is the 85C090 EPLD. 
This is due to using Turbo 


Mode 
to quickly 
decode 
the PI Bus signals 
and mini- 


mize 
RFA 
access 
time. 
Unfortunately, 
this 
causes 
a 


constant 
current 
draw of 160 mA. The EPLD's 
Normal 


mode cannot 
be used since there is no advance 
warning 


of an XIP 
flash memory 
access. 


PRDY # Enable Jumper 


The 
PI Bus signal 
PRDY # has a very weak 
pull-up 


resistor 
on the motherboard. 
Consequently, 
it has to be 


driven high (inactive) 
for a short time at the end of each 


cycle. Timing 
for this logic comes 
from the early 
taps 


on the delay line as follows: 


100 Nanosecond 
delay line 
(SXTTLDM-I2 
1)E4-E5 


200 Nanosecond 
delay line 
(SXTTLDM-125)E4-E3 


The purpose 
of the SMOUT4 
signal 
was to allow 
the 


RFA 
Daughter 
board 
to perform 
a local standby, 
pow- 


ering 
down 
various 
devices 
on 
the 
RF A 
Daughter 


board. 
However, 
since the EPLD 
must remain 
powered 


on until Global 
suspend, 
and consumes 
a high amount 


of current 
compared 
to the FlashFile 
power 
consump- 


tion, local standby 
was not implemented. 


A few software 
utilities 
need to be created 
to load the 


binaries 
created 
for XIP 
code implementations. 


It is highly recommended 
that system designers 
develop 


simple 
diagnostic 
tools to test the hardware 
at a very 


low level (i.e., write byte, write word, 
read word, 
erase 


block). 
Such a tool proves 
invaluable 
when 
debugging 


new hardware 
and software 
designs and resolving 
hard- 


ware and software 
conflicts. 


• 


4.2 
RFA Binary Loader 


The RFA Binary files HIROM.BIN, 
LOROM.BIN, 
and ROM Disk must all be loaded into Protected Mode 
from Real Mode. This can be accomplished a number 
of ways: 
1. Use a DOS Extender. This provides a quick method 
to create a utility using the tools a DOS extender 
provides. However, licensing may prove to be diffi- 
cult or expensive. 


2. Using BIOS-based extended memory calls. These 
actually 
worked 
quite 
nicely and 
reliably, 
but 
proved to be slow and doubled the time to erase and 
program HIROM.BIN. 


3. Putting the processor in flat mode. This method al- 
lows for fast, direct access to the extended memory, 
but cannot be done under windows. 


For lab testing, our binary loader used a simple file 
name plus command line parameters. A system for end- 
users would need a more elaborate user interface to 
guide them through the software update. Some basic 
software requirements outside of the basic me read/ 
write capabilities and command line parsing for the 
flash memory Binary Loader are: 


• Incorporate basic flash memory program and era- 
sure commands. These software drivers are available 
for both ASM86 and "C" in Application Note-360 
"28FOO8SA" 
Software 
Drivers, 
order 
number 
292095-002. This application note addresses things 
like read device identifier, Vpp ramp time, x8 and 
x16 parallel programming and block erasure by pro- 
viding proven, tested routines for each. 


• Choose a method of Protected Mode access that 


makes the most sense for you. 


• Allow for specific base addresses to be entered by 


the user, while within the program automatically de- 
termining what block and the number of blocks to 
be erased from the base address and binary me size. 


This application note discussed a new system architec- 
ture based on solid-state software and hardware design 
concepts. This new architecture is based on using flash 
memory for the following; BIOS + DOS code storage, 
a nonvolatile RAM disk or RFD, and as XIP GUI 
code storage or RFX. Specific flash memory compo- 
nent and PCMCIA card information is found in their 
respective datasheets. Contact your local Intel or distri- 
bution sales office for more information or to obtain 
assistance in evaluating Boot Block or FlashFile memo- 
ry components, 
as well as Intel's 
product 
line of 


PCMCIA Flash Memory Cards. 


APPENDIX 
A 
ADDITIONAL 
PUBLICATIONS 


> 
Intel "28F008SA Hardware Interfacing" Application Note 
Order number 292094 


> 
Intel "28F008SA Software Drivers" Application Note 
Order number 292095 


> 
Intel "Power Supply Solutions for Flash Memory" Application Note 
Order number 292092 


> 
Intel 85C090 24-Macrocell CHMOS EPLD 
Order number 290247 


> 
Intel 5AC3I2 I2-Macrocell CHMOS EPLD 
Order number 290247 
• 


APPENDIX B 


MS DOS ROM IMAGE DESCRIPTION 


##################################################################### 
# 
RFA ROM OOS Description 
File 
# 
# ROM image description 
file for 64K of ROM space at 
# 
# 
Eoooo-EFFFF 
and one 256K ROMDISK 
module at F90000 
# 


##################################################################### 
# Actual file sizes created: Three 32K modules 


ROM 1=Int 19 hook and Resident 
OOS Code 


ROM1SIZE=8000 
ROM1MAX=7FFF 
ROMlTYPE=SEG 
ROM 1ADDR=EOOO 
ROMICHKSUM=YES 
ROM1NUMBLOCKS=40 
ROM 1FILES= ..\romhead\romboot.bin 
..\dos\resdos.16 


ROM2=COMMAND 
ROM Hdr Res. BIOS Code Bootstrap 
loader Resident Command 
Code 


R0M2SIZE=8000 
R0M2MAX=7FFF 
ROM2TYPE=SEG 
R0M2ADDR=E800 
ROM2CHKSUM=YES 


R0M2NUMBLOCKS=40 
ROM2FILES= 
..\cmd\command\romhead.bin 
..\bios\resbio.16 
\ 


..\romload\romload.sys 
..\cmd\command\rescom.16 
..\dos\romdos.sys 


ROM3=Command 
interpreter 


ROM3SIZE=1סס oo 
ROM3MAX=FFFF 
ROM3TYPE=BASE 
ROM3ADDR=F9oooo 
ROM3FILES= 
..\cmd\command\command.16 
..\bios\rombio.sys 


APPENDIX 
C 


ROMDISK CONFIG.SYS 
AND AUTOEXEC.BAT 


AUTOEXEC.BAT 
@echooff 
prompt$PSG 
set path=c:\;d:\rdk 1O\build\disk;d:\utils;d :\diags; 
c:\doskey 
doskey d=dir $1 $2 
d:\rdk 1O\build\disk\smartdrv.exe 1024 1024 
set TEMP=d:\ 
ver Ir 
echo "MS DOS ROM. Card & Aash Disk SS 2.0. MS AashFile System 2." 
echo "and Windows 3.1 ROM" 


CONFIG.SYS 
DEVICE=c:\HIMEM.SYS 
break=on 
buffers=40 
files=40 
lastdrive=H 
DOS=HIGH.UMB 
FUEM················································ 
FUEMAashFile System Drivers 
Device=C:\rfaslss.sys 
Device=C:\ss36Ssl.exe 
Device=C:\cs.exe 
Device=C:\rtinit.exe 
Device=C:\icard29.exe 
Device=C:\ms-flash.sys 
FUEM•••••••••••••••••••••••••••••••••••••••••••••••••• 


• 


APPENDIX 
D 
WINDOWS 
3.1 CONTENTS. ROM 


; Windows 
3.1 ROM Development 
Kit (ROK) 
1.0 


; Sample ROM Description 
File 


; Copyright 
Microsoft 
Corporation, 
1992 


; Enhanced 
Mode, Full 
; 10/20192 Removed IT Fonts 


; Specifics length of ROMs and the linear addresses 
; at which they arc to appear. 


LoROM Oc8000 
004000 
; 16k 
HiROM COOOOO3FFCoo 
; 4 Mb 


ROMTOC 
100 
LoROM 
NUMFILENT 
14 
LOT 
1024 
HiROM 256 


; WINFLAGS 
13 


WINFLAGS 
15 


; SYSDIR 
system 


ROMYERSION 
1000 


; ROMTOC 
entries 


; FILES entries 
; Local Descriptor 
Table 
; 286 version; Value is in HEX 
; 386 version; Value is in HEX 


; Windows 
directory on disk (optional) 


; I = masked 
ROM, 000 = OEM version 


; Specifics modules to be loaded into ROM. 
; Format is as follows: 
; Module 
SEG File 
ROM 
Flags 


OOSX.EXE 


SEG2 
%ROMFILES%dosx.exe 
HiROM 
LoROM 
NOEXEHOR 
; Std mode MS OOS extender 


; OXDGROUP 
- Copy from ext with INT 15h 


SEG 3 
HiROM; 
DXPMCODE 
; KERNEL.EXE 
%ROMFILES%krnI286.exe 
HiROM 
KERNEL.EXE 
%ROMFILES%krnI386.exe 
HiROM 
;286 kernel 
; 386 kernel (ROM version) 


SYSTEM.DRY 
%ROMFILES%system.drv 
HiROM 
KEYBOARD.DRY 
%ROMFILES%keyboard.drv 
HiROM 
SEG 10 COMP 
; Do not remove! 
; Display 
; YGAROM2.DRY 
%ROMFILES%vgarom2.drv 
HiROM 
YGAROM3.DRY 
%ROMFILES%vgarom3.drv 
HiROM 
; SYGAR2.DRY 
%ROMFILES%svgar2.drv 
HiROM 


; SYGAR3.DRY 
%ROMFILES%svgar3.drv 
HiROM 


; System 
; Keyboard 


;286 YGA 
;386 YGA 
; 286 SuperYGA 
; 386 SuperYGA 


MOUSE.DRY 
%ROMFILES%mouse.drv 
HiROM 
; Mouse 
SEG 2 RAM COMP NORELOC 
; Do not remove! 


; NOMOUSE.DRY 
%ROMFILES%nomouse.drv 
HiROM 
; No mouse 


COMM.DRY 
%ROMFILES%comm.drv 
SEG 2 RAM COMP NORELOC 
SEG 3COMP 


HiROM 
; COM, LPT 
; Do not remove! 


; Do not remove! 


GDI.EXE 
%ROMFILES%gdi.exe 
USER.EXE 
%ROMFILES%user.exe 
SEG 3 RAM COMP NORELOC 


HiROM 
HiROM 
; ROM version 
; ROM version 
; Do not remove! 


SHELL.DLL 
%ROMFILES%shell.dll 
HiROM 
LZEXPAND.DLL 
%ROMFILES%lzexpand.dll 
HiROM 
WlN87EM.DLL 
%ROMFILES%win87em.dll 
HiROM 


; Shell APls 
; Expansion 
; Math emulator 


COMMDLG.DLL 
%ROMFILES%commdlg.dll 
HiROM 
STUB 
; Common dialogs 
OLECLl.DLL 
%ROMFILES%olecli.dll 
HiROM 
STUB 
; OLE Client 
OLESVR.DLL 
%ROMFILES%olesvr.dll 
HiROM 
STUB 
; OLE Server 
TOOLHELP.DLL 
%ROMFILES%toolhelp.dll 
HiROM 
STUB 
; Tool Help DLL 
DDEML.DLL 
%ROMFILES%ddeml.dll 
HiROM 
STUB 
; DDE 
VER.DLL 
%ROMFILES%ver.dll 
HiROM 
STUB 
; Version DLL 


SND.CPL 
%RETAIL%snd.cpl 
HiROM 


MPLAYER.EXE 
%RETAIL%mplayer.exe 
HiROM 


SOUNDREC.EXE 
%RETAIL%soundrec.exe 
HiROM 


; Sound icon 
; Media Player 
; Sound Recorder 


PROGMAN.EXE 
%RETAIL%progman.exe 
HiROM 


WINFILE.EXE 
%RETAIL%winfile.exe 
HiROM 


TASKMAN.EXE 
%RETAIL%taskman.exe 
HiROM 


WINHELP.EXE 
%RETAIL%winhelp.exe 
HiROM 


WINTIJTOR.EXE 
%RETAIL%wintutor.exe 
HiROM 


DRIVERS.CPL 
%RETAIL%drivers.cpl 


MAIN.CPL 
%ROMFILES%main.cpl 


CONTROL.EXE 
%RETAIL%control.exe 


HiROM 
HiROM 
HiROM 


; PRINTMAN.EXE 
%RETAIL%printman.exe 
HiROM 


; UNIDRV.DLL 
%ROMFILES%unidrv.dll 
HiROM 


; DMCOLOR.DLL 
%ROMFILES%dmcolor.dll 
HiROM 


VGASYS.FON 
%RETAIL%vgasys.fon 
HiROM 


VGAFIX.FON 
%RETAIL%vgafix.fon 
HiROM 


VGAOEM.FON 
%RETAIL%vgaoem.fon 
HiROM 


COURE.FON 
%RETAIL%coure.fon 
HiROM 


SERIFE.FON 
%RETAIL%serife.fon 
HiROM 


SMALLE.FON 
%RETAIL%smalle.fon 
HiROM 


SSERIFE.FON 
%RETAIL%sserife.fon 
HiROM 


SYMBOLE.FON 
%RETAIL%symbole.fon 
HiROM 


MODERN.FON 
%RETAIL%modern.fon 


ROMAN.FON 
%RETAIL%roman.fon 


SCRIPT.FON 
%RETAIL%script.fon 


HiROM 
HiROM 
HiROM 


; Program Mgr 


; File Manager 


; Task Manager 


; Windows Help 
; Tutorial 


; Drivers icon 
; Main icons 


; Control Panel 


; Print Mgr 
; Uni driver 
; Uni driver 


; System (VGA) 
; Fixed pitch 


; OEM 


; Courier (VGA) 


; MS Serif (VGA) 
; Small (VGA) 
; MS Sans Serif(VGA) 


; Symbol (VGA) 


; Modern 


; Roman 


; Script 


• 


ARIAL.FOT 
%RETAlL%arial.fot 
HiROM 
ARIALBD.FOT 
%RETAlL%arialbd.fot 
HiROM 
ARIALBI.FOT 
%RETAlLo/oarialbi.fot 
HiROM 
ARIALI.FOT 
%RETAlLo/oariali.fot 
HiROM 
; COUR.FOT 
%RETAlL%cour.fot 
HiROM 
; COURBD.FOT 
%RETAlL%courbd.fot 
HiROM 
; COURBI.FOT 
%RETAlL%courbi.fot 
HiROM 


; COURI.FOT 
%RETAlL%couri.fot 
HiROM 
; SYMBOL.FOT 
%RETAlL%symbol.fot 
HiROM 
; TIMES.FOT 
%RETAlL%times.fot 
HiROM 
; TIMESBD.FOT 
%RETAlL%timesbd.fot 
HiROM 
; TIMESBI.FOT 
%RETAlL%timesbi.fot 
HiROM 
; TIMESI.FOT 
%RETAlL%timesi.fot 
HiROM 
WINGDING.FOT 
%RETAIL%wingding.fot 
HiROM 


intel~ 


;Arial 
; Arial Bold 
; Arial Bold Italic 
; Arial Italic 
; Courier New 
; Courier New Bold 
; Courier New Bold Italic 
; Courier New Italic 
; Symbol 
; Times New Roman 
; Times New Roman Bold 
; Times New Roman Bold Italic 
; Times New Roman Italic 
; WingDings 


VGA3GR 
%RETAlL%vga.3gr 
HiROM 
; Enh mode grabber 
WINOLDAP.MOD 
%RETAlL%winoldap.mod 
HiROM 
; Std mode MS DOS app support 
SEG 2 RAM COMP NORELOC 
; Do not remove! 
WIN0A386.MOD 
%RETAlL%win0a386.mod 
HiROM 
; Enh mode MS DOS app support 
SEG 1 RAM COMP NORELOC 
; Do not remove! 
SEG 2 RAM COMP NORELOC 
; Do not remove! 
SEG 5 RAM COMP NORELOC 
; Do not remove! 


DOSAPP.FON 
%RETAlL%dosapp.fon 
HiROM 
EGA80WOA.FON 
%RETAlL%ega80woa.fon 
HiROM 
EGA40WOA.FON 
%RETAIL%ega40woa.fon 
HiROM 
CGA80WOA.FON 
%RETAIL%ega80woa.fon 
HiROM 
CGA40WOA.FON 
%RETAlL%cga40woa.fon 
HiROM 


CALC.EXE 
%RETAlL%calc.exe 
HiROM 
CALENDAR.EXE 
%RETAIL%calendar.exe 
HiROM 
CARDFILE.EXE 
%RETAIL%cardfile.exe 
HiROM 
CHARMAP.EXE 
%RETAlL%charmap.exe 
HiROM 
CLIPBRD.EXE 
%RETAlL%clipbrd.exe 
HiROM 
CLOCK.EXE 
%RETAIL%clock.exe 
HiROM 
NOTEPAD.EXE 
%RETAlL%notepad.exe 
HiROM 
PACKAGER.EXE 
%RETAlL%packager.exe 
HiROM 
PBRUSH.DLL 
%RETAlL%pbrush.dll 
HiROM 
PBRUSH.EXE 
%RETAlL%pbrush.exe 
HiROM 
PIFEDIT.EXE 
%RETAlL%pifedit.exe 
HiROM 
RECORDER.DLL 
%RETAlL%recorder.dll 
HiROM 
RECORDER.EXE 
%RETAIL%recorder.exe 
HiROM 
SOL.EXE 
%RETAlL%sol.exe 
HiROM 
; TERMINAL.EXE 
%RETAlL%terminal.exe 
HiROM 


; Calculator 
; Calendar 
; Card file 
; Character Map 
; Clipboard Viewer 
; Clock 
; Notepad applet 
; Packager applet 
; for Paintbrush 
; Paintbrush 
; PIF Editor 
; for RECORDER.EXE 
; Recorder 
; Solitaire 
; Terminal 


WINMINE.EXE 
%RETAIL%winmine.exe 
HiROM 
WRITE.EXE 
%RETAIL%write.exe 
HiROM 


; Specifies optional files to be installed into ROM. 
; TrueType TIF font files are specified in this section. 


ARIAI-.TTF 
%RETAIL%arial.ttf 
HiROM 
ARIAI-BD.TIF 
%RETAILo/08rialbd.ttf 
HiROM 
ARIAI-BI.TIF 
%RETAILo/08rialbi.ttf 
HiROM 
ARIAI-I.TTF 
%RETAILo/08riali.ttf 
HiROM 
; COUR.TTF 
%RETAIL%cour.ttf 
HiROM 


; COURBD.TIF 
%RETAIL%courbd.ttf 
HiROM 


; COURBI.TTF 
%RETAILo/ocourbi.ttf 
HiROM 
; COURI.TTF 
%RETAILo/ocouri.ttf 
HiROM 
; SYMBOL.TTF 
%RETAIL%symbol.ttf 
HiROM 
; TIMES.TTF 
%RETAIL%times.ttf 
HiROM 
; TIMESBD.TTF 
%RETAIL%timesbd.ttf 
HiROM 


; TIMESBI.TIF 
%RETAIL%timesbi.ttf 
HiROM 
; TIMESI.TTF 
%RETAIL%timesi.ttf 
HiROM 
WlNGDING.TTF 
%RETAIL%wingding.ttf 
HiROM 


; WinMine 
; Write 


; Arial 
; Arial Bold 
; Arial Bold Italic 
; Arial Italic 
; Courier New 
; Courier New Bold 
; Courier New Bold Italic 
; Courier New Italic 
; Symbol 
; Times New Roman 
; Times New Roman Bold 
; Times New Roman Bold Italic 
; Times New Roman Italic 
; WingDings 
• 


APPENDIX 
E 
EPLD EQUATIONS 


Included below are the equations for both the 85C090 and the 5AC312 EPLDs. See the RFA Schematic 
Diskette for disk-readable ·.ADF and ·.JED files. 


OPTIONS: TIJRBO=ON 
PART: N85C090 % PLCC % 
• 


This EPLD provides the main control logic ofthe Resident Flash 
Array Evaluation board. The following is included: 


Flash Memory chip enables 
Modes Register chip enable (RS_CEIFLASH_CE5) 
ROM Stub control logic 
74FCT623 Data ButTerControl 
74FCT373 Address Latches Gate control (HOLDII) 
Wf. Wfll. and ROil generation 


CN_SPC_A - 04/08192 
Rcconfigured Flash Array to provide 8 Meg 


of Flash Disk and 4 Meg of Executable Memory. 


INPlITS: 
DL_OlIT@2 
% Delay line out (high edge sets PROY flf) 
% 


PM@4 
% PI bus Memory or 1011 
% 


PCMDII@14 
% PI bus Command 
% 


PSTART_DLYII@42 
% Delayed PSTARTII signal (used to create HOLDII) % 


A14@5 
% PlIISA bus Latched Addresses 
% 


A15@19 
A16@20 
LA17@21 
% PlIISA bus Unlatched Addresses 
% 


LA18@26 
LA19@25 
LA20@27 
LA21@28 
LA22@29 
LA23@30 
MRDCII@3 
% ISA bus Memory Read (A1116MBytc) 
% 


VGACSII@13 
% VGA Chip Select 
% 


FLASHDCSII@12 
% Flash Disk Chip Select 
% 


L]W@41 
% PI bus PWIRII (latched) 
% 


EN]ROY@40 
% Enable PROYII driver 
% 


SAoo@43 
% Latched address bit 00 
% 


SBHE_L#@37 
% Latched System Byte High Enable 
% 


FLASH_CEOII@15 
% Flash Memory Zone pairs Chip Selects 
. 
% 


FLASH_CEIII@16 
FLASH_CE211@35 


FLASH_CE3#@34 
FLASH_CE4#@33 
FLASH_CE5#@32 
RS_CE@31 
% ROM Stub Chip Select 
% 
RD#@6 
% Read Strobe 
% 
WI'_L#@lO 
% Write Strobe, Lower Byte 
% 
WI' _U#@8 
% Write Strobe, Upper Byte 
% 
WI'@36 
% Write Strobe (Active High for 74F623 enable) % 
HOLD#@7 
% Hold Address Latches (close gate) 
% 
SA16@11 
% HIGH for Sel_RS, else 3-S 
% 
DL_IN@38 
% Delay line driver 
% 
PRDY#@9 
% PI bus signal 
% 
PRDY@18 
% D-type flf 
% 


PM 
= INP(PM) 
nPCMD 
= INP(PCMD#) 
nPSTART_DLY = INP(PSTART_DLY#) 
A14 
= INP(A14) 
A15 
= INP(A15) 
A16 
= INP(A16) 
LAI7 
= INP(LA17) 
LAI8 
= INP(LAI8) 
LAI9 
= INP(LAI9) 
LAlO 
= INP(LA20) 
LAlI 
= INP(LAlI) 
LAl2 
= INP(LA22) 
LAl3 
= INP(LA23) 
nMRDC 
= INP(MRDC#) 
nYGACS 
= INP(YGACS#) 
nFLASHDCS 
= INP(FLASHDCS#) 
L_PW 
= INP(L]W) 
EN]RDY 
= INP(EN]RDY) 
DL_OUT 
= INP(DL_OUT) 
SAOO 
= INP(SAOO) 
nSBHE_L 
= INP(SBHE_L#) 


FLASH_CEO#,nFLASH_CEO 
= COIFCFLASH_CEO,YCC) 
FLASH_CEI#,nFLASH_CEI 
= COIF(]LASH_CEl,YCC) 
FLASH_CE2#,nFLASH_CE2 
= COIFCFLASH_CE2,YCC) 
FLASH_CE3#,nFLASH_CEJ 
= COIF(]LASH_CE3,YCC) 
FLASH_CE4#,nFLASH_ CE4 
= COIF(]LASH_ 
CE4,YCC) 
FLASH_CE5#,nFLASH_CE5 
= COIF(]LASH_CE5,YCC) 
RS_CE,RS_CEf 
= COIF(iRS_CE,YCC) 
RD# 
= CONFCRD,YCC) 
WI'_L# 
= CONFC WI' _L,YCC) 
WI' _U# 
= CONFC WI' _U,YCC) 
WI' 
= CONF(iWI', YCC) 


• 
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HOLD# 
DL_IN,DL_INf 
PRDY,PROYf 
PROY# 
SAl6 


= CONFCHOLD,VCC) 
= COlF(iDL_IN,VCC) 
= RORF(VCC,DL_OlIT,_DL_IN,GND,VCC) 
= CONF(]ROY,EN]RDY) 


= CONF(VCC,Rd_RS) 


PCMD 
= nPCMD'; 
PSTART_DLY = nPSTART _DLY'; 
MRDC 
= nMRDC'; 
VGACS 
= nVGACS'; 
FLASHDCS 
= nFLASHDCS'; 


SBHE_L 
= nSBHE_L'; 


FLASH_CEO = nFLASH_CEO'; 
FLASH_CEI 
= nFLASH_CEl'; 
FLASH_CE2 
= nFLASH_CE2'; 
FLASH_CE3 
= nFLASH_CE3'; 
FLASH_CE4 = nFLASH_CE4'; 
FLASH_CES = nFLASH_CES'; 
_DL_IN 
= DL_INt'; 
]ROY 
= PRDYt'; 


Hold 
=PSTART_DLY 


+PCMD 
+MRDC; 


Open 
= /Hold; 
Closed 
= IOpen; 


% ROM Stub, OC8000h through OCBFFEh % 
Sel_RS 
= IFLASHDCS * NGACS 
*1LA23 *1LA22 *1LA21 


*1LA20 * LAl9 * LAl8 *ILA17 * IAl6 * AlS * IAI4; 


Sel_Modes = Sel]DM 
* LA23 * LA22 * LA21 * LA20 % Modes Reg % 


* LAl9 * LAl8 * LAl? * A16; 


Modes_CE 
= RS_CEf*IFLASH_CES; 


Rd_RS 
= RS_CEf* FLASH_CES; 


% Zone pairs 0 and I are unconditionally assigned to the Flash 
Disk. Zone pair 5 is unconditionally assigned to the Executable 
Memory. Zone pairs 2, 3, and 4 are assigned with the three 
equations below by selecting either Yes or No for the three 
Flash Disk assignments. 
Assignments must be in order, 3 can 
be assigned to the Flash Disk only if2 is. and 4 can be assigned 
to the Flash Disk only if2 and 3 is. Zone pairs not assigned 
to the Flash Disk are automatically assigned to Executable 
Memory. % 


% Demo Configuration 
Z2eqFD=No; 
Z3eqFD = No; 
Z4eqFD=No; 
% 


% Customer Configuration % 
Z2eqFD = Yes; 
Z3eqFD = Yes; 
Z4eqFD=No; 


Z2eqXIP8 = IZ2eqFD; 


Z3eqXIP8 = IZ2eqXIP8 * lZ3eqFD; 
Z3eqXIPA = Z2eqXIPS * IZ3eqFD; 


Z4eqXIP8 = IZ2eqXIP8 * lZ3eqXIP8 * IZ4eqFD; 
Z4eqXIPA = Z3eqXIP8 * IZ4eqFD; 
Z4eqXIPC = Z3eqXIPA * IZ4eqFD; 


ZSeqXIP8 = IZ2eqX1P8 * lZ3eqXIP8 * IZ4eqXIP8; 
ZSeqXlPA = Z4eqXIP8; 
ZSeqXIPC = Z4eqXIPA; 
ZSeqXIPE = Z4eqXIPC; 


% Zone pairs 0 and I are unconditionally assigned to Flash Disk. % 
]LASH_CEO' 
= Open 
* Sel_FDM *1LA23 *1LA22 *1LA21 
+ Closed * FLASH_CEO; 


]LASH_CEI' 
= Open 
* Sel]DM 
*1LA23 *1LA22 * LA2I 
+ Closed * FLASH_CEI; 


% Zone pairs 2, 3, and 4 are conditionally assigned to either 
Flash Disk or Execute-in-Place memory. XIP starts at 800000h 
to avoid conflict with ROM Stub. % 


• 


]LASH_CE2' 
= Open 
* Sel]DM 
*1LA23 * LA22 *1LA21 * Z2eqFD 
+ Open 
* Seuap 
* LA23 *1LA22 *1LA21 * Z2eqXIP8 
+ Closed * FLASH_CE2; 


]LASH_CE3' 
= Open 
* Sel]DM 
*1LA23 * LA22 * LA21 * Z3eqFD 
+ Open 
* Sel_XIP * LA23 *1LA22 *1LA21 * Z3eqXJP8 
+ Open 
* SetXIP 
* LA23 *1LA22 * LA21 * Z3eqXJPA 
+ Closed * FLASH_CE3; 


_FLASH_ CE4' = Open 
* Sel]DM 
* LA23 * 1LA22 * 1LA21 * ZAeqFD 
+ Open 
* Sel_XIP * LA23 * 1LA22 * 1LA21 * ZAeqXIP8 
+ Open 
* Sel_XIP * LA23 * 1LA22 * LA21 * ZAeqXlPA 
+ Open 
* Sel_XIP * LA23 * LA22 *1LA21 * ZAeqXJPC 
+ Closed * FLASH_CE4; 


% Zone pair 5 is unconditionally assigned to Execute-in-Place. 
Zone pair 5 is ~Iso enabled if Rom Stub is selected. % 


]LASH_CE5' 
= Open 
* Sel_XIP * LA23 *1LA22 *1LA21 * Z5eqXIP8 
+ Open 
* Sel_XIP * LA23 *1LA22 * LA21 * ZSeqXIPA 
+ Open 
* Sel_XIP * LA23 * LA22 *1LA21 * ZSeqXIPC 
+ Open 
* Sel_XIP * LA23 * LA22 * LA21 * ZSeqXIPE 
+ Open 
* Sel_RS 
+ Closed * FLASH_CES; 


% RS_CE forces Flash Addresses 15 through 20 high. This, along 
with the activation ofFLASH_CES#. 
cause ROM Stub accesses to 
go to the upper 16 KBytes of Zone pair 5. % 
iRS_CE 
= Open 
* SeI_RS 
+ Open 
* Sel_Modes 
+ Closed * RS_CEf; 


_RD' 
= PCMD * FLASH_CEO *IL]W 
+ PCMD * FLASH_CEI *IL]W 
+ PCMD * FLASH_CE2 *IL]W 
+ PCMD * FLASH_CE3 *IL]W 
+ PCMD * FLASH_CE4 * IL]W 
+ PCMD * FLASH_CE5 * IL]W 
+ PCMD * Modes_CE 
*IL_PW 
+ MRDC * Rd_RS; 


_Wf_U' 
= PCMD * FLASH_CEO * L_PW*SBHE_L 
+ PCMD * FLASH_CEI * L_PW * SBHE_L 
+ PCMD * FLASH_CE2 * L_PW * SBHE_L 
+ PCMD * FLASH_CE3 * L]W 
* SBHE_L 
+ PCMD * FLASH_CE4 * L]W 
* SBHE_L 
+ PCMD * FLASH_CES * L]W 
* SBHE_L 


+ PCMD * FLASH CES * L PW * RS CEf% RS CE->SBHE L 3-S % 
+ PCMD * Modesj::E 
* Lj>W * SBHE_L; 
- 
- 


intelQP 


_Wf_L' 
= PCMD * FLASH_CEO * L]W 
*/SAOO 
+ PCMD * FLASH_CEI * L]W 
*/SAOO 
+ PCMD * FLASH_CEl * L]W 
*/SAOO 
+ PCMD * FLASH_CE3 * L]W 
*/SAOO 
+ PCMD * FLASH_CE4 * L]W 
*/SAOO 
+ PCMD * FLASH_CE5 * L]W 
*/SAOO 
+ PCMD * Modes_CE * L]W 
*/SAOO; 


iWf 
= PCMD * FLASH_CEO * L_PW 
+ PCMD * FLASH_CEI * L]W 
+ PCMD * FLASH_CEl * L_PW 
+ PCMD * FLASH_CE3 * L_PW 
+ PCMD * FLASH_CE4 * L]W 
+ PCMD * FLASH_CE5 * L]W 
+ PCMD * Modes_CE * L]W; 


_HOLD' 
= Hold; 


iDL_lN 
= PCMD * FLASH_CEO 
+ PCMD * FLASH_CEI 
+ PCMD * FLASH_CE2 
+ PCMD * FLASH_CE3 
+ PCMD * FLASH_CE4 
+ PCMD * FLASH_CE5 
+ PCMD * Modes_CE; 


OPTIONS: TURBO = OFF 
PART: NSAC312 
% PLCC % 


This EPLD contains logic for the following: 


Flash Array VPP control 
FDM and XIP Power Down control 
Flash Disk Memory READY Interrupt control 


MD_REV _B - 04/29192 MODES_CE now a function for FLASH_CES and 


RS_CE, rather than separate. This is to 
save pins on the other EPLD. 


WT#@2 
% Write Strobe 
% 
RD#@4 
% Read Strobe 
% 
SAO1@9 
% BufferedlLatehed Address bit 01 
% 
SA02@10 
% BufferedlLatehed Address bit 02 
% 
RSIDRV@16 
% lSA bus Reset Driver 
% 
ALL_RDY@27 
% All Flash ICs assigned to Flash Disk are RDY % 
SMOlIT4@12 
% +SLOCAL ON when this is high 
% 
FLASH_CES#@6 
RS_CE@8 
% ROM Stub Chip Select 
% 


EN_FLASH_ VPP@22 
% Pwr Cntrl Reg bit 00; Enable Flash Array VPP 
% 
PWR_ UP@26 
% Pwr Cntrl Reg /bit 03 
% 
PWRD#@3 
% Power control signal to entire Flash Array 
% 
INTR@13 
% Intr Cntrl Reg bit 00; Flash Disk RDY Intr 
% 
SDOO@17 
% Internal Data Bus 
% 
SDOI@18 
SD02@20 
SD03@21 
UNUSED23@23 
UNUSED24@24 


CLR_INTRf 
EN_INTRf 


NETWORK: 


% Clear Interrupt flip-flop 
% 
% Modes Reg bit 02; Enable Flash Disk RDY Intr 
% 


nWT 
= INP(WT#} 
nRD 
= INP(RD#} 
SAOI 
= INP(SAOI) 
SA02 
= INP(SA02) 
RSIDRV 
= INP(RSIDRV} 
ALL_RDY 
= INP(ALL_RDY} 
SMOlIT4 
= INP(SMOlIT4) 
INTR_CLK 
= CLKB(ALL_RDY) 
nFLASH_CES = INP(FLASH_CES#) 
RS_CE 
= INP(RS_CE} 


SDOO,SDOOf 
SDOl,SDOlf 
SD02,SD02f 


= COlF(iSDOO,CHIP_RD) 
= COIF(iSDOl,CHIP _RD) 
= COlF(iSD02,CHIP _RD) 


• 


PWR_UP.PWR_UPf 
PWRDN 
EN_INTRf 
INTR,INTRf 
CLR_INTRf 
UNUSED23 
UNUSED24 


= RORF(iPWR_UP.nWf.GND.RSTDRV.VCC) 
= CONF(]WRD.VCC) 
= NORF(iEN_INTR,nWf.RSTDRV.GND) 
= RORF(VCC.INTR_ CLK,CLR_INTRt:GND. VCC) 
= NOCF(iCLR_INTR) 
= CONF(GND.VCC) 
= CONF(GND. VCC) 


RD 
=nRD'; 
Wf' 
=nwr; 
FLASH_CES 
= nFLASH_CES'; 


Modes_CE 
= RS_CE *IFLASH_CES; 


SetPwr_Reg 
= Modes_CE */SA02 */SAOI; 


SeUntr_Reg 
= Modes_CE */SA02 * SAOI; 


CHIP_RD 
= RD * Modes_CE; 


FDM_Busy 
= /ALL_RDY; 


iSDOO 
= Sel_Pwr_Reg 
* EN_FLASH_ VPPf 
+ SeUntr_Reg 
* EN_INTRf, 


iSDOI 
= SetPwr_Reg 
* GND 
+ SeUntr_Reg 
* INTRf, 


iSD02 
= Sel]wr_Reg 
* GND 
+ SeUntr_Reg 
* FDM_Busy; 


iSD03 
= Sel_Pwr_Reg 
*IPWR_UPf 
+ SeUntr _Reg * GND; 


iEN_FLASH_ VPP = Sel_Pwr_Reg * SDOOf 
+ /Sel]wr_Reg 
* EN_FLASH_ VPPf; 


]WRD 
= PWR_UPf 
+ SMOlIT4; 


iEN_INTR, 
= SeUntr_Reg· 
SDOOf 
+ /SeUntr_Reg 
• EN_INTRf; 


iCLR_INTR 
= RSTDRV 
+ 1EN_INTRf 
+ WT· 
Sel_Clr_Intr; 
• 
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The Intel 28FOO8SAFlashFile™ 
Memory is today's 
optimum solution for high density solid state storage. 
Flash memory, exemplified by the 28FOO8SA,is an en- 
abling technology for today's powerful system designs 
that are higher performance, more compact, lighter, 
more rugged and have longer battery life. 


Features of the 28FOO8SAinclude: 
• High-Density Symmetrically Blocked Architecture: 
- 
Sixteen 64-Kbyte Blocks 


• Extended Cycling Capability 
- 
100,000 Block Erase Cycles 
- 
1.6 Million Block Erase Cycles per Chip 


• Automated Byte Write and Block Erase 
- 
Co=and 
User Interface 
- 
Status Register 


• System Performance Enhancements 
- 
RY/BY # Status Output 
- 
Erase Suspend Capability 


• Deep Powerdown Mode 
- 
0.20 /LA lee Typical 


• Very High Performance Read 
- 
85 ns Maximum Access Time 


• SRAM-Compatible Write Interface 
• Hardware Data Protection Features 
- 
EraselWrite 
Lockout during Power Transitions 


• Industry Standard Packaging 
- 
40 Lead TSOP, 44 Lead PSOP 


• ETOX III Nonvolatile Flash Memory Technology 
- 
12V Byte Write/Block Erase 


The 28FOO8SA's automation is a significant enhance- 
ment to the manual algorithms of first-generation flash 
memory devices. System software and hardware de- 
signs that fully understand and exploit this automation 
will greatly benefit from its versatility and capabilities. 
The concepts presented in this document are applicable 
to such designs. 


This application note discusses in-depth operation of 
the 28FOO8SAFlashFile memory Write State Machine 
and internal algorithms, emphasizing how they inter- 
face to system hardware and software. The 28FOO8SA 
datasheet (order number 290429) is a valuable reference 


intel~ 


document, providing in-depth device technical specifi- 
cations, package pinouts and timing waveforms. Com- 
panion application note AP-359, "28FOO8SAHardware 
Interfacing" (order number 292(94) describes supply 
voltage derivation and filtering, control input/output 
implementation, high density layout and high speed de- 
sign techniques, as well as providing example system 
interfaces to common microprocessor buses. AP-360, 
"28FOO8SASoftware Drivers" (order number 292095) 
provides example ASM-86 and '''C'' routines for con- 
trolling the 28FOO8SA.AP-359 and AP-360 should be 
reviewed in conjunction with this application note and 
the 28FOO8SAdatasheet for a complete understanding 
of this device. 


2.0 
AUTOMATION 
AN[) 


ALGORITHMS 


Figure I shows a block diagram of the 28FOO8SAand 
its internal contents. Although a main subject of this 
application note is software interface to read and alter 
memory contents, it is useful to be::ginwith an overview 
of the 28FOO8SAhardware subsections that are directly 
manipulated by the system. In particular, this applica- 
tion note will fust discuss the Write State Machine 
(WSM) and Command User Interface/Status 
Register, 


and then explain the software routines that control this 
hardware. 


2.1 
28F008SA Automation 
and the 


Write State MachinE! 


When the system microprocessor reads flash memory 
data from the 28FOO8SA,it uses control lines CEll" and 
OE#, along with address inputs, to select a byte of data 
directly from the memory cell arra.y. However, the sys- 
tem does not directly access the array when it writes to 
the 28FOO8SA;instead it writes to the Co=and 
User 


Interface, whose register contents are interpreted and 
translated 
into 
WSM actions. 
The 
WSM 
can 
be 


thought of as a dedicated "processor", along with com- 
panion clock-generation circuitry, integrated into the 
flash memory. After receiving proper co=ands 
or 
command sequences, it controls byte write and block 
erase algorithms internally. The status of the WSM is 
not invisible to the system; the WSM interfaces to the 
outside world through a full-featured Status Register 
and dedicated RY/BY# 
(Ready/Busy#) 
output. Au- 


tomation has significant benefits, some of which are 
more obvious than others. 


The WSM architecture dramatically simplifies the pro- 
gram and erase algorithms 
of first-generation 
flash 
memory devices. Hardware/software 
timers, erase pre- 
programming, byte-by-byte verification and margining, 
pulse repetition and limited microprocessor multitask- 
ing capability throughout data update have been elimi- 
nated, replaced by a simple two-command write for 
both block erase and byte write. The 28FOO8SAWSM 
halts itself when its internal algorithms are complete, 
and can alert the system to this completion by a hard- 
ware interrupt (using RY/BY#) 
or via software poll- 
ing of the 28FOO8SAStatus Register. 


Internal automation frees the system to execute higher- 
priority tasks while a 28FOO8SAis being block erased 
or byte written, and inherent in this capability is the 
most powerful advantage of the WSM. Operating sys- 
tems prioritize fIle operations in the following order: 


• Read 
• Write 
• Erase 


When an array of 28FOO8SAcomponents is used as 
solid-state storage (in a memory card, integrated in a 
flash-based "hard drive" form factor or resident on the 
system motherboard), 
system software 
can initiate 


slower block erase (0.3 sec minimum) of one or several 


28FOO8SAsand, by not being "tied" to the erase algo- 
rithm, execute higher priority reads (85 ns minimum) 
or writes (6 JLs minimum) of other 28FOO8SAsas oper- 
ating system requests dictate. Additionally, erase sus- 
pend/resume 
capability allows data retrieval from a 


28FOO8SAcurrently being block erased, again enabling 
"read" as the highest priority task. Block erase as a 
background task is discussed in Section 2.6 of this doc- 
ument. 


Table 2 shows the various command sequences that are 
accepted and interpreted by the 28FOO8SACommand 
User Interface and WSM. Writes to the CUI enable 
reading of device data and intelligent identifiers, read- 
ing and clearing of the Status Register, and commence- 
ment of internal byte write, block erase and erase sus- 
pend/resume algorithms. The CUI itself does not occu- 
py a specifically addressable memory location, and con- 
tains a latch used to store the command and address/ 
data information 
needed to execute the command. 


Erase Setup and Erase Confirm commands require both 
appropriate command data and an address within the 
block to be erased. The Byte Write Setup command 
requires appropriate command data and the address of 
the location to be written, while the Byte Write com- 
mand consists of the data to be written and its address 
location. 


WSMS 


7 


ESS 


6 


BWS 


4 


VPPS 


3 
[~ 


o 


SR.5 = ERASE 
STATUS 


I = Error in Block Erasure 
o = Successful Block Write 


NOTES: 
RY/BY# 
or the Write State Machine Status bit must 


first be checked to determine byte write or block erase 
completion, before the Byte Write or Erase Status bits 
are checked for success. 
If the Byte Write AND Erase Status bits are set to "1 "s 
during a block erase attempt, an improper command 
sequence was entered. Attempt the operation again. 
If Vpp low status is detected, the Status Register must 
be cleared before another byte write or block erase op- 
eration is attempted. 
The Vpp Status bit, unlike an AID converter, does not 
provide continuous indication of Vpp level. The WSM 
interrogates the Vpp level only after the byte write or 
block erase command sequences have been entered 
and informs the system if Vpp has not been switched 
on. The Vpp Status bit is not guaranteed to report ac- 
curate feedback between VPPLand VPPH· 


SR.7 = WRITE 
STATE 
MACHINE 
STATUS' 


I = Ready 
o = Busy 


SR.6 = ERASE 
SUSPEND 
STATUS 


I = Erase Suspended 
o = Erase in Progress/Completed 


SR.4 = BYTE WRITE 
STATUS 


I = Error 
in Byte Write 
o = Successful Byte Write 


SR.3 = Vpp STATUS 
I = Vpp Low Detect; Operation 
Abort 


0= 
Vpp OK 


SR.2-SR.O 
= RESERVED 
FOR FUTURE 
ENHANCEMENTS 
These bits are reserved for future use and should be masked out when polling the Status Register. 


Bus 
First 
Bus Cycle 
Secl:md 
Bus Cycle 
Command 
Cycles 
Notes 
Req'd 
Operation 
Address 
Data 
Operation 
Address 
Data 


Read Array/Reset 
1 
Write 
X 
FFH 


Intelligent 
Identifier 
3 
1,2,3 
Write 
X 
90H 
Read 
IA 
110 


Read Status Register 
2 
2 
Write 
X 
70H 
Read 
X 
SRD 


Clear Status Register 
1 
Write 
X 
50H 


Erase Setup/Erase 
Confirm 
2 
1 
Write 
BA 
20H 
Write 
BA 
DOH 


Erase Suspend/Erase 
Resume 
2 
Write 
X 
BOH 
Write 
X 
DOH 


Byte Write Setup/Write 
2 
1,2,4 
Write 
WA 
40H 
Write 
WA 
WD 


Alternate 
Byte Write Setup/Write 
2 
1,2,4 
Write 
WA 
10H 
Write 
WA 
WD 


NOTES: 
1. IA = Identifier Address: OOHfor manufacturer code, 01H for device code. 
BA = Address within the block being erased. 
WA = Address of memory location to be written. 


2. SRD = Data read from Status Register. See Table 4 for a description of the Status Register bits. 


WD = Data to be written at location WA. Data is latched on the rising edge of WE. 
liD = Data read from intelligent identifiers. 


3. Following the intelligent identifier command, two read operations access manufacturer and device (:odes. 
4. Either 40H or 10H are recognized by the WSM as the Byte Write Setup command. 
5. Commands other than those shown above are reserved by Intel for future device implementations and should not be 
used. 


intel~ 


Status 
Register 


Table I shows the 28FOO8SAStatus Register and de- 
fines its various bits. Like the Command User Inter- 
face, it does not occupy a specific memory location 
within the device. It functions as an output of the 
WSM, informing the system when internal byte write 
or block erase algorithms have completed, if these algo- 
rithms 
completed 
successfully, 
and 
whether 
the 


28FOO8SAis currently in Erase Suspend mode. Bit 7 
(Write State Machine Status) is replicated in the device 
RY/BY# 
hardware output. The default state of the 


upper 5 bits of the Status Register after powerup and 
return from deep powerdown mode is 1סס oo (binary). 


A separate Clear Status Register command allows re- 
initialization of Status Register data after analysis. The 
Status Register is not cleared until this command is 
written to the 28FOO8SA. 


Bits 5 and 4 of the Status Register, if set by the WSM 
via a byte write or block erase attempt, do not block 
subsequent attempts (they need not be cleared before 
another byte writelblock 
erase command sequence is 


written to the device). However, if the WSM detects a 
"low Vpp" condition and subsequently sets bit 3 of the 
Status Register, the Status Register MUST be cleared 
before another algorithm command sequence will be 
recognized by the 28FOO8SA. 


It is important to note that the Vpp Status bit of the 
Status Register DOES NOT act like an always-func- 
tional AID converter; its normal state, even with Vpp 
below 6.5V, is "0". The WSM only analyzes the Vpp 
level after a byte write or block erase command se- 
quence has been written to the device, and if it detects 
that Vpp is "low" it will cancel the impending byte 
write or block erase operation and set the Vpp Status 
bit to "I". Therefore, the Vpp Status bit cannot be used 
by the system as an indication of proper Vpp level, be- 
fore a byte write or block erase sequence is initiated. 
The system should instead insert an appropriate soft- 
ware delay between turning on Vpp and writing an ini- 
tial command sequence, or use external hardware as a 
Vpp feedback mechanism. 


Figure 2 provides a graphical representation 
of the 


28FOO8SAbyte write algorithm. As can be seen, this 
consists solely of a two-command write sequence, fol- 
lowed by a periodic poll of the device RY/BY # output 
or Status Register. The 28FOO8SAautomatically out- 
puts Status Register data when read after the two-com- 
mand byte write sequence (see Section 2.5). Byte write 
typically completes in 9 ,...s. 


The byte write algorithm requires high voltage VPPH 
(12V ± 5%) on the device Vpp input until internal al- 
gorithm completion is reported by the WSM. If byte 
write is attempted while Vpp = VpPL (~6.5V), 
the 


Vpp Status bit of the Status Register will be set to "I", 
and array data will not be altered. Byte write attempts 
while VPPL < Vpp < VPPH produce spurious results 
and should not be attempted. 


The Status Register will only report errors for "I"s that 
do not write to "O"s during a byte write attempt. Era- 
• 


sure (see Section 2.3) is the method used to change data 
"O"s to "I"s using flash technology. If the system soft- 
ware attempts to write "I"s to a byte at bit locations 
already at value "0", no Status Register error will be 
reported for those specific bits. 


It is often desired to write multiple bytes of data at one 
time to memory. Since the Status Register is only 
cleared after the Clear Status Register command is 
written to the 28FOO8SA,a string of bytes can be se- 
quentially written to the device before the "full status 
check procedure" examines Status Register bits other 
than SR.7. 


Byte write abort occurs when the 28FOO8SARP # (Re- 
setlPowerdown) input drops to VIL (deep powerdown 
mode is entered), or Vpp drops to VpPL' Although the 
WSM is halted in either case, byte data is partially writ- 
ten at the location where aborted. A repeat byte write 
sequence after system integrity is restored will complete 
the desired operation, or data can be initialized to a 
known value of "FF" thru block erasure. 


Bus 
Command 
'Comments 
Operation 


Write 
Byte Write 
Data ~ 40H (10H) 


Setup 
Address = Byte to be written 


Write 
Byte Write 
Data to be written 
Address = Byte to be written 


Standbyl 


Read 
Check RY/BY# 
VOH ~ Ready, VOL = Busy 
or 
Read Statu s Register 
Check SRi' 
1 ~ Ready, 0 = Busy 
Toggle OE;~ or CE # to update 
Status Register 


Repeat for subsequent bytes 


Full status check can be done after each byte or after a 
sequence of bytes 


Write FFH after the last byte write operation to reset the 
device to Read Array Mode 


Bus 
Command 
Comments 
Operation 


Optional 
CPU may already have read 


Read 
Status Register data in WSM 
Ready polling above 


Standby 
Check SR3 
1 = Vpp Low Detect 


Standby 
Check SR4 
1 = Byte VI me Error 


SR.3 MUST be cleared, if set during a byte write attempt, 
before further attempts are allowed by the Write State 
Machine 


SRA is only cleared by the Clear Status Register Command, 
in cases where multiple bytes are writton before full status is 
checked 


If error is detected, clear the Status Register before 
attempting retry or other error recovery. 


;Igm-~j ptvlOes 
a grapmcal representation 
or me 
28FOO8SAblock erase algorithm, similar in its two- 
command write sequence to the byte write algorithm 
discussed earlier. Both the Erase Setup and Erase Con- 
firm commands must be accompanied by an address 
within the desired block to be erased to FFH. The 
28FOO8SAautomatically outputs Status Register data 
when read after the two-command block erase sequence 
(see Section 2.5). Block erase typically completes in 
1.6 sec. 


Again similar to byte write, the block erase algorithm 
requires high voltage VpPH (12V ±5%) on the device 
Vpp input until internal algorithm completion is re- 
ported by the WSM. If block erase is attempted while 
Vpp = VpPL (S:6.5V), the Vpp Status bit of the Status 
Register will be set to "1", and array data will not be 
altered. Block erase attempts while VPPL < Vpp < 
VpPH produce spurious results and should not be at- 
tempted. 


If write of the Erase Setup command is followed by 
write of any other command but Erase Confirm, the 
WSM will decode this as an illegal sequence. It will not 
attempt to erase the specified block, and will report 
error back to the system by setting both the Erase 
Status and Byte Write Status bits of the Status Register 
to "1". Since the Status Register is only cleared after 
the Clear Status Register command is written to the 
28FOO8SA,a string of blocks within a 28FOO8SA'can 
be sequentially erased before the "full status check pro- 
cedure" examines Status Register bits other than SR.7. 


UUWU 
lllUUC; .1~ CUU::::lCUj 
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block erase sequence after system integrity is restored 
will complete the desired operation. 


2.4 
Erase Suspend/Resume 
Algorithm 


Figure 4 gives a software flowchart for implementing 
erase suspend/resume 
using the 28FOO8SA.As men- 


tioned in Section 2.1, operating systems prioritize data 
reads highest, and consequently the 28FOO8SA has 
been designed with read as its highest performance 
function. Erase suspend allows system software to post- 
pone WSM-controlled 
block erase if the system re- 


quests read of data from 8 different block of the same 
device. Although any block of the 28FOQ8SAcan be 
read, the block being erased when suspended will con- 
tain unknown data. 


The 28FOO8SAis suspended by writing the Erase Sus- 
pend command (BOH)to it while the WSM is executing 
an erase algorithm. The WSM will halt block erase, set 
bits 7 and 6 of the Status Register to "I" and transition 
RY/BY# 
to VOH, after which time system software 
can read data from either the array or Status Register. 
Issuing the Erase Resume command (DOH) signals .the 
WSM to resume block erase. 


Vpp must remain at VPPH throughout the erase sus- 
pend interval, even when reading from the flash memo- 
ry array. The 28FOQ8SAwill detect a Vpp transition to 
VPPL while suspended, and report this error via Status 
Register bit 3 (set to "I") after the Erase Resume com- 
mand is written to it. 
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Bus 
Command 
Comments 
Operation 


Write 
Erase 
Data = 20H 


Setup 
Address 
=, Within block to be 


erased 


Write 
Erase 
Data = DOH 


Confirm 
Address 
=, Within block to be 


erased 


Standby/ 
Check 
RYlBY 
/1 


Read 
VOH = Re·ady. VOL = Busy 


or 


Read Status 
Register 


CheckSR.7 
1 = Ready, 0 = Busy 
ToggleOE/1 
orCE/1 
to 
update 
Stcltus Register 


Repeat 
for subsequent 
blocks 


Full status check can be done after each block or after a 
sequence 
of blocks 


Write FFH after the last block erase operation 
to reset 


the device to Read Array Mode 


Bus 
Command 
C,)mments 
Operation 


Optional 
CPU may alroady have read 


Read 
Status Register data in WSM 
Ready pollin\1 above 


Standby 
Check SR.3 
1 = Vpp Low Detect 


Standby 
Check SRA,!i 
Both 1 = Command sequence 
Error 


Standby 
Check SR.5 
1 = Block Erase Error 


SR.3 MUST be cleared, if set during a block erase attempt, 
before further attempts are allowed by the Write State 
Machine 


SR.5 is only cleared by the Clear Status Register Command, 
in cases where multiple blocks are erasEd before full status 
is checked 


If error is detected, clear the Status Register before 
attempting retry or other error recovery 


Bus 
Command 
Comments 
Operation 


Write 
Erase 
Data = BOH 


Suspend 


Write 
Read 
Data = 70H 


Status 
Register 


Standby 
Check 
RY IBY # 


Read 
VOH = Ready, VOL = Busy 
or Read Status 
Register 


CheckSR.7 


1 = Ready, 0 = Busy 
ToggleOE# 
orCE# 
to 
Update 
Status 
Register 


Standby 
CheckSR.6 
1 = Suspended 


Write 
Read Array 
Data = FFH 


Read 
Read array data from block 
other than that being erased. 


Write 
Erase Resume 
Data = DOH 


Since the WSM is driven by its own oscillator, internal 
to the 28FOO8SA,it operates asynchronously to the sys- 
tem CPU and its clock. Therefore, the possibility exists 
that 
the WSM could complete erase, returning 
to 


"ready", between when the system reads "busy" from 
the Status Register and writes the Erase Suspend com- 
mand. Analyzing both the WSM Status and Erase Sus- 
pend Status bits of the Status Register, as shown in the 
flowchart, will alert the system to such an occurrence. 


2.5 
Write State Machine Current/Next 
State Overview 


Byte write and block erase automation equate to tre- 
mendous power and capability in system implementa- 
tions of the 28FOO8SA,if fully exploited. An in-depth 
understanding of the WSM, its sta$es and its responses 
to inputs, will assist the software engineer in developing 
optimized driver routines for flash memory-based file 
storage and other high-performance applications. Table 
3 lists all possible WSM "current 
states", command 
inputs and resultant "next states". 


Non-shaded 
boxes highlight 
those state 
transitions 
which will most commonly occur when reading from 
and modifying 28FOO8SA contents, and these tran- 
sitions should be understood in most depth. Shaded 
boxes, on the other hand, represent lesser-used or non- 
sensical transitions, such as improper erase command 
sequences. 


Before reading the 28FOO8SA, if the current WSM 
mode is not known (if, for example, an interrupt service 
routine has potentially interacted with the device), first 
write the desired output command (i.e. Read Status 
Register, Read Array or Intelligent Identifier). This en- 
sures that the 28FOO8SAwill be in a known state when 
read and will output expected data. 
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Read Array 


The 28FOO8SAautomatically defaults to Read Array 
mode when powered up, or when it returns from Deep 
Powerdown mode. As the name implies, the 28FOO8SA 
outputs array data when read in Read Array mode. 
Read Array is also the default mode after the Clear 
Status Register command 
is w:ritten in most other 


modes. 


The 28FOO8SAtransitions to Byte Write Setup mode 
after it receives the Byte Write Setup command. If the 
28FOO8SAis read in Byte Write Setup mode, it outputs 
Status Register data. 


Byte Write 


After the 28FOO8SA is placed in Byte Write Setup 
mode, the next address/data 
combination written to it 


transitions the WSM to Byte W.rite mode, where the 
"Byte Write Command" is latched as desired data to 
write to the array at the specified address location. Im- 
mediately, the WSM examines Vpp, and if it detects an 
invalid level, it halts with Vpp e:rror indication in the 
Status Register (bit 3 = "I "). Bit 7 of the Status Regis- 
ter is "0", and the RY/BY # output is driven to VOL, 
while the WSM is executing the internal byte write al- 
gorithm in Byte Write mode. The 28FOO8SAautomati- 
cally outputs Status Register datu when in Byte Write 
mode. 


The 28FOO8SAtransitions to Era!.e Setup mode after it 
receives the Erase Setup command. If the 28FOO8SAis 
read in Erase Setup mode, it outputs Status Register 
data. 
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Command 
Input (and Next State) 


Current 
RY/BY'" 
Data 
Byte 
When 
Read 
Write 
Erase 
Erase 
Erase 
Erase 
Read 
Clear 
Read 10 
State 
Status 
Array 
Setup 
Confirm 
Suspend 
Resume 
Status 
Status 
Read 
Setup 
(90H) 
(FFH) 
(10/40H) 
(20H) 
(DOH) 
(BOH) 
(DOH) 
(70H) 
(50H) 


Read 
Read 
Byte 
Erase 
Read 
Read 
Read 
Read 
Read 
Array 
VOH 
Array 
Array 
Write 
Setup 
Array 
Array 
Array 
Status 
Array 
ReadlD 
Setup 


Byte Write 
VOH 
Status 
Byte Write (Command Input = Data to be Byte Written) 
Setup 


Byte Write 
(Not 
VOL 
Status 
Byte Write 
Complete) 


Byte Write 
Read 
Byte 
Erase 
Read 
Read 


(Complete) 
VOH 
Status 
Array 
Write 
Setup 
ReadArray 
. 
Status 
Array 
Read ID 
Setup 


Erase 
Erase 


Setup 
VOH 
Status 
Erase Command Error 
Erase 
Erase 
Erase Command Error 
Error 


Erase 
Read 
Byte 
Erase 
Read 
Read 
Command 
VOH 
Status 
Array 
Write 
Setup 
Read Array 
Status 
Array 
ReadlD 
Error 
Setup 


Erase 
Erase 
(Not 
VOL 
Status 
Erase 
Suspend 
Erase 
Complete) 
to Status 


Erase 
Read 
Byte 
Erase 
Read 
Read 


(Complete) 
VOH 
Status 
Array 
Write 
Setup 
Read Array 
Status 
Array 
ReadlD 
Setup 


Erase 
Erase 
Erase 
Erase 
Erase 
Erase 


Suspend 
VOH 
Status Suspend R 
Erase 
Suspend 
Erase 
Suspend Suspend Reserved 
to Status 
to Array 
to Array 
to Array 
to Status to Array 


Erase 
Erase 
Erase 
Erase 
Erase 
Erase 


Suspend 
VOH 
Array Suspend Reserved Suspend 
Erase 
Suspend 
Erase 
Suspend Suspend Reserved 
to Array 
to Array 
to Array 
to Array 
to Status to Array 


Read 
Read 
Byte 
Erase 
Read 
Read 


Status 
VOH 
Status 
Array 
Write 
Setup 
Read Array 
Status 
Array 
ReadlD 
Setup 


Read 
Read 
Byte 
Erase 
Read 
Read 


Identifier 
VOH 
ID 
Array 
Write 
Setup 
Read Array 
Status 
Array 
Read 10 
Setup 


NOTE: 
1. State transitions labeled "Reserved" are set aside by Intel Corporation for potential future device implementations. Com- 
mand sequences to access these states should not be attempted. 


Mter 
the 
28FOO8SA 
is placed 
in Erase 
Setup 
mode, 
write 
of the 
Erase 
Confirm 
command 
transitions 
the 


WSM 
to Erase 
mode, 
where 
the 
specified 
address 
is 


decoded 
into one of 16 blocks to be erased. 
Immediate- 


ly, the WSM examines 
Vpp, and if it detects 
an invalid 


level, it halts 
with 
Vpp 
error 
indication 
in the Status 
Register 
(bit 3 = "I"). 
Bit 7 of the Status 
Register 
is 


"0", 
and the RY/BY# 
output 
is driven 
to VOL, while 


the 
WSM 
is executing 
the 
internal 
block 
erase 
algo- 


rithm 
in 
Erase 
mode. 
The 
28FOO8SA 
automatically 


outputs 
Status 
Register 
data 
when in Erase 
mode. 


This 
is the other 
possible 
transition 
mode 
after 
Erase 


Setup, and occurs 
when an invalid 
command 
(anything 


but 
Erase 
ConfrrmlResume) 
is 
written 
to 
the 


28FOO8SA 
as the 
second 
in the 
two-command 
block 


erase 
sequence. 
In this 
mode, 
the WSM 
does 
not 
at- 


tempt 
a block 
erase, 
and it returns 
an error 
indication 


to the system 
by setting 
both bits 4 and 5 of the Status 


Register 
to "I". 
The 28FOO8SA automatically 
outputs 


Status 
Register 
data 
when 
in Erase 
Command 
Error 


mode. 


Erase Suspend 
to Statusl Array 


While 
the 
WSM 
is busy 
executing 
an internal 
block 


erase 
algorithm, 
it can be placed 
in erase 
suspend 
by 


writing 
the 
Erase 
Suspend 
command. 
After 
receiving 


and decoding 
this command, 
the WSM suspends 
block 
erase, 
drives 
the RY/BY# 
output 
to VOH, sets bits 6 


and 7 of the Status 
Register 
to "1" 
and transitions 
to 
"Erase 
Suspend 
to Status" 
mode. 
The 28FOO8SA auto- 


matically 
outputs 
Status 
Register 
data 
when in "Erase 


Suspend 
to Status" 
mode. 


The 
only valid 
command 
other 
than 
Read 
Status 
and 


Erase 
Resume 
at this time is Read 
Array, 
which 
tran- 


sitions 
the WSM 
to "Erase 
Suspend 
to Array" 
mode. 
As the name implies, 
the 28FOO8SA outputs 
array data, 
not 
Status 
Register 
contents, 
in this 
mode. 
While 
in 


both 
Erase 
Suspend 
modes, 
Vpp must remain 
at VpPH 


for erase to complete 
successfully 
when 
resumed. 


Writing 
the 
Erase 
Resume 
(same 
as Erase 
Confirm) 


command 
to the 28FOO8SA transitions 
the WSM out of 


Erase 
Suspend 
and back to Erase. 
In conjunction 
with 


this, the WSM returns 
R Y/BY # to VOL and resets bits 


6 and 7 of the WSM to "0". 


As the name implies, 
the 28FOO8SA automatically 
out- 


puts Status 
Register 
contents 
wh,:n read in Read Status 


mode. 
If system 
software 
writes 
the Clear 
Status 
com- 


mand 
at this point, 
the WSM resets the Status 
Register 


to 
its 
default 
value 
and 
transitions 
to 
Read 
Array 


mode. 


The 
28FOO8SA 
outputs 
its manufacturer 
identifier 
of 


89H 
when 
read 
from 
address 
OOOOOHwhen 
in Read 


Identifier 
mode. Similarly, 
a read from address 
OOOOIH 


returns 
the device 
identifier 
A2H. 
Using 
this informa- 


tion, 
the 
system 
can 
automatically 
match 
the 
device 


with its proper 
block 
erase and 'byte write 
algorithms. 


Reads 
from addresses 
other 
than 
OOOOOHand OOOOIH 


are 
not 
supported 
by Intel, 
and 
consistent 
results 
of 
such reads 
are not documented, 
guaranteed 
or recom- 


mended. 


2.6 
Block Erase as a Biilckground 
Task 


As mentioned 
earlier, 
the 
internal 
WSM 
block 
erase 


algorithm 
typically 
takes 
1.6 
seconds 
to 
complete. 


Proper 
implementation 
of block 4:rase from a hardware 


and software 
standpoint, 
however, 
can mask this delay, 


by taking 
advantage 
of the 28FC08SA's 
internal 
auto- 


mation 
and full-featured 
system 
interface. 
Execution 
of 


block erase as a background 
task, 
with higher 
priority 


read and write functions 
in the foreground, 
is the key. 


The 
recommended 
scenario 
includes 
an 
"intelligent" 


operating 
system 
routine 
which 
can 
keep 
track 
of 
"busy" 
devices in the 28FOO8SA array. 
Mter 
initiating 


block erase on these components" 
the operating 
system 


is free to concentrate 
on reads and writes, 
or any other 


pending 
requests 
that 
demand 
its 
attention. 
The 


28FOO8SA 
RY/BY# 
output 
ale:rts the 
system 
when 


block erase completes, 
and the operating 
system acts on 


this completion 
in the resulting 
interrupt 
service 
rou- 


tine. 


Hardware 
interrupt 
via the RY/BY# 
output 
is a rec- 


ommended 
technique 
for block 
erase. 
However, 
this 


method 
should 
be evaluated 
closely for alerting 
the sys- 
tem to byte write completion. 
The: WSM typically 
com- 


pletes a byte write attempt 
in 9 1Jo!1, a much shorter 
time 


than 
that 
consumed 
in many 
CPU 
interrupt 
latencies. 


In such cases, software 
polling 
of the 28FOO8SA Status 


Register 
to detect 
WSM 
"ready", 
versus 
hardware 
in- 


terrupt, 
will result 
in highest 
bylte write 
performance. 


Reference 
AP-359, 
"28FOO8SA Hardware 
Interfacing", 


for 
circuit 
implementations 
that 
not 
only 
combine 


RY/BY#s 
into 
a 
common 
INT, 
but 
also 
allow 


R Y/BY # masking 
if desired. 


28F008SA Datasheet 
28F008SA-L Datasheet 
AP-359 
"28F008SA Hardware 
Interfacing" 


AP-360 
"28F008SA Software 
Drivers" 
ER-27 
"The Intel 28F008SA Flash 
Memory" 
ER-28 
"ETOX-III Flash Memory 
Technology" 


Order 
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PWD# pin renamed RP# to match JEDEC standards. 
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The 
28F016SA 
is the 
second 
member 
of Intel's. 


FlashFile™ 
memory family. Its architecture evolved 
from that of the 28F008SA, Intel's first generation 
FlashFile memory device. The 28FOl6SA retains the 
standard 28F008SA's versatile capabilities and adds a 
Command Superset architecture which insures compat- 
ibility with the basic command-set. 


This application note shows how to upgrade an existing 
28F008SA-based design to the new 28FOl6SA memory 
device. Upgrades may require software modifications 
depending 
on the desired system functionality 
and 


straightforward 
hardware modifications to accommo- 


date the new pinout. 


2.0 SIMILARITIES 
AND DIFFERENCES 
BETWEEN 
THE 28F016SA 
AND 
THE 28F008SA 


The 28FOl6SA memory is 100% command and algo- 
rithm, backward-compatible with the 28F008SA. It is 
defmed as a Superset device which brings additional 
capabilities to system designs. Additional pins on the 
28FOl6SA are added to define a user-selectable 8- or 
16-bit wide memory, add on-chip write protection and 
multiple chip select signals. Note that you do not have 
to use the advanced features if you are performing a 
simple upgrade to the 28FOI6SA. 


Before starting on your design upgrade, obtain the fol- 
lowing specifications and application notes from Intel 
Corporation Literature Sales, I (800) 548-4725. 


28F008SA 
Data Sheet 
28F016SA 
Data Sheet 
28F016SA 
User's Manual 


28F008SA 
Software 
Drivers 
28F016SA 
Software 
Drivers 


Order # 
290429 
290489 
297372 
292095 
292126 


2.1 
Pinout Differences 


Whereas the 28F008SA is 8-bit wide (40Ld-TSOP 
package), the 28FOl6SA is a high performance 16-bit 
wide flash file memory offering a llser-configurable bus 
width (56Ld-TSOP package). Hence an additional 8 
I/O pins are on the 28FOI6SA. Furthermore, 
the im- 


plementation of additional features such as Write Pro- 
tect and Block Locking and user-selectable 3.3V and 
5V operation require the definition of control pins for 
these 
functions. 
Finally, 
the 
optimization 
of 
the 


28FOI6SA's architecture 
to achi,eve very high write 


performance resulted in a different pinout configura- 
tion from the 28F008SA. 


Both device pinouts preserve the locations of 110 pins 
on the right-hand side and the sequence of pin func- 
tions of the 56Ld-TSOP package. However, it is still 
required to relay out an existing PCB design in order to 
accommodate the 16-Mbit chips. Table I lists all pin 
names and their numbers, highlighting all the changes. 


28FOO8SA 
28F016SA 
28FOO8SA 
28F016SA 
Notes 
PinName 
PinName 
40L·TSOP 
56L·TSOP 


AQ 
AQ 
24 
32 


Al 
Al 
23 
28 


A2 
A2 
22 
27 


A3 
A3 
21 
26 


A4 
~ 
20 
25 


As 
As 
19 
24 


A6 
~ 
18 
23 


A7 
A7 
17 
22 


Ae 
Ae 
16 
20 


A9 
A9 
15 
19 


AlO 
AlO 
14 
18 


All 
Al1 
13 
17 


A12 
A12 
8 
13 


A13 
A13 
7 
12 


A14 
A14 
6 
11 


A1S 
A1S 
5 
10 


A16 
A16 
4 
8 


A17 
A17 
3 
7 


Ale 
Ale 
2 
6 


A19 
A19 
1 
5 
- 
A20 
- 
4 
1 


000 
000 
25 
33 


001 
001 
26 
35 


002 
002 
27 
38 


003 
003 
28 
40 


004 
004 
32 
44 


OOs 
DOs 
33 
46 


28FOO8SA 
28F016SA 
28FOO8SA 
28F016SA 
Notes 
PinName 
PinName 
40L·TSOP 
56L·TSOP 


006 
006 
34 
49 


007 
007 
35 
51 


- 
DOe 
- 
34 


- 
009 
- 
36 


- 
DOlO 
- 
39 


- 
0011 
- 
41 


- 
0012 
- 
45 


- 
0013 
- 
47 


- 
0014 
- 
50 


- 
D01S 
- 
52 


CE# 
CEo# 
9 
14 


- 
CE1# 
- 
2 
2 


RP# 
RP# 
12 
16 
3 


RY/BY# 
RY/BY# 
36 
53 
4 


oE# 
oE# 
37 
54 


WE# 
WE# 
38 
55 


- 
BYTE# 
- 
31 
5 


- 
WP# 
- 
56 


- 
3/5# 
- 
1 
6 


Vpp 
Vpp 
11 
15 


Vss 
VSS 
29,30 
21,42,48 


Vcc 
Vcc 
10,31 
9,37,43 


NC 
NC 
39.40 
3.29.30 


NOTES: 
1. Highest 
Order 
Address 
2. Dual CEx# 
3. Formerly 
Called 
PWD# 


4. Open 
Drain for 28F016SA 
S. x8/x16 
Selection 
6. Selects 
Supply 
Voltage 


2.1.1 HARDWARE 
COMPATIBLE 
CONFIGURATION 


The following is an example which shows the state of 
all pins when operating in a 28FOO8SA-compatible 
mode: 


= Vcc (Write Protect feature disabled) 
= CEI # (Chip Enable) 
= GND or VCC (selects upperllower 
1MB) 


Address to Select 
Between 
Upper 
and 
Lower 
1 t.4byte 


Vcc 
BYTE # 


RY/BY# 


= GND (5V operation) or Vcc (3.3V oper- 


ation) 


= 5.0V or 3.3V 
= GND (8-bit mode) 
= Level Mode (set fol' default) with an ex- 


ternal pull-up resistor 


NOTE: 
The 28FOO8SAhas a CMOS driven RY/BY# 
output 


for interrupt capability. 


Byte Write 


Single Block Erase 


Erase Suspend 
to Read 


Read Array 


Read CSR 


ClearCSR 


Read Intelligent 
IDs 


4OH,IOH 


20H 
BOH 


FFH 


70H 


50H 


90H 


Command 
Notes 
First Bus Cycle 
Second 
Bus Cycle 


Oper 
Addr 
Data 
Oper 
Addr 
Data 


Read Array 
Write 
X 
FFH 
Read 
AA 
AD 


Intelligent 
Identifier 
1 
Write 
X 
90H 
Read 
IA 
10 


Read Compatible 
Status Register 
2 
Write 
X 
70H 
Read 
X 
CSRD 


Clear Status Register 
3 
Write 
X 
50H 


Word/Byte 
Write 
Write 
X 
40H 
Write 
WA 
WD 


Alternate 
Word/Byte 
Write 
Write 
X 
10H 
Write 
WA 
WD 


Block Erase/Confirm 
Write 
X 
20H 
Write 
BA 
DOH 


Erase Suspend/Resume 
Write 
X 
BOH 
Write 
X 
DOH 


ADDRESS 
DATA 
AA = Array Address 
AD = Array Data 
BA = Block Address 
CSR = Compatible 
Status Register 
IA = Identifier 
Address 
CSRD = CSR Data 
WA = Write Address 
GSR = Global Status Register 
X = Don't Care 
BSR = Block Status Register 
10 = Identifier 
Data 
WD = Write Data 


NOTES: 
1. Following 
the Intelligent 
Identifier 
command, 
two Read operations 
access 
the manufacturer 
and device 
signature 
codes. 


2. The CSR is automatically 
available 
after device 
enters 
Data Write, 
Erase, or Suspend 
operations. 
3. Clears 
CSR.3, 
CSR.4 
and CSR.5. 
Also clears 
GSR.5 
and all BSR.5 
and BSR.2 bits. See Status 
register 
definitions 
in the 
28F016SA 
data sheet. 


2.3 
Technology Comparison 


Both the 28FOl6SA and the 28F008SA are manufac- 
tured on Intel's Flash ETOX process technology. This 
technology is optimized for random access flash memo- 
ry products with the highest read/write 
performance 


and lowest power consumption. The ETOX flash tech- 
nology achieves very high reliability and quality. 


The 28FOl6SA designed on a 0.6 IJ-mETOX IV pro- 
cess, achieves faster speeds than the 28F008SA manu- 
factured on 0.8 IJ-mETOX III process. Intel offers the 
28F008SA in 5V-read version with speeds at 85/90 ns 
and 120 ns. The 28FOl6SA on the other hand is offered 
with a dual 3.3V and 5V read capability with speeds of 
(70/80 ns, 100 ns) and (120 ns, 150 ns) at 5V and 3.3V 
respectively. Note that both devices are offered at faster 
speeds (85 ns and 70 ns) under reduced loading condi- 
tions. Please consult the data sheets referenced in this 
application note. 


The 28F016SA comes only in a 56Ld-Thin Small Out- 
line Package (TSOP) optimized for its user-selectable 
x8/x16 memory architecture. The 28F008SA is offered 
in 2 packages, which are the 4OLd-TSOP (both stan- 
dard and reverse pinout) and the 44Ld-Plastic Small 
Outline Package (PSOP). 


The 28FOl6SA behaves in the same manner as the 
28F008SA. If a compatible command is written to the 
device, the Compatible Status Register contents are au- 
tomatically put on the data bus. With the block locking 
disabled (WP # =high), the 28FO16SA is identical to 
the 28F008SA, regardless of any lock-bit settings which 
defme the lock state of a given block. The Command 
User Interface (CUI), Write State Machine (WSM) and 
Compatible Status Register (CSR) units function simi- 
larly on both devices. 


The 28FOl6SA however, allows the user to issue multi- 
ple commands successively by watching the Queue bit 
(GSR.3 or BSR.3), a feature which improves perform- 
ance, as described in the 28FOl6SA user's manual. 
Consult the 28FOl6SA data sheet and 28FOl6SA user's 
manual for detail operation. 


intel~ 


The 28FOl6SA specifies the output Load circuit as an 
equivalent transmission line model which reflects the 
timing delays more accurately. The same diode/resistor 
circuit combination found in the 28FOO8SAdata sheet 
also applies to the 28FOI6SA. 


Address and Data are latched (In the rising edge of 
WE# 
for both devices. All AC timing specifications 


are similar except for the differences noted in the data 
sheets. The 28FOl6SA has additional write timings de- 
scribing the on-chip page buffers which do not exist on 
the 28F008SA. 


Whereas the 28F008SA only operates at 5V Vcc and 
the 
28F008SA-L 
only operates 
at 
3.3V VCC, the 


28FOl6SA operates at both 3.3V and 5V VCC supply 
voltages. In 5V mode of operation, the two devices are 
similar in terms of input/output 
level specifications. 


Consult the data sheets for differ,ences in current con- 
sumption. 


In addition to the active, standby llnd deep power-down 
modes which exist on the 28F008SA, the 28FOl6SA 
has additional current modes useful in power manage- 
ment applications. 


The two modes are: 
Automatic 
Power Saving feature: which is activated 


whenever the device addresses are not switching which 
is equivalent to a static mode of operation on the chip is 
accessed by a slowed clock. In this state, the chip typi- 
cally draws less than 1 mA of total current. 


The second low current mode of operation is enabled 
through command control, using the Sleep command. 
A Sleep command written to tht: device will put the 
chip in the lowest current state (deep power-down lev- 
el) after all active operations have been processed. The 
device retains the value of its status registers while in 
sleep mode. 


Note that the AC and DC spedfications 
mentioned 


here are valid at the time this appli.cation note was writ- 
ten. Please reference the device da1a sheets for the latest 
up-to-date specifications. 


intelQP 


3.0 
HARDWARE 
DESIGN 
CONSIDERATIONS 


If you are 
considering 
a density 
upgrade 
to the 
28FOI6SA, careful attention to certain areas must be 
followed. This section is not intended to cover all po- 
tential issues related to system design, but rather as a 
guideline in designing an upgrade to the 28F016SA. 


The following flowchart summarizes the logical steps a 
system designer must go through to complete a density 
upgrade. This simple upgradability procedure allows 
the 28F016SA-based system to achieve quicker time-to- 
market while incorporating future expandability to take 
advantage of the Superset features of the 28FOI6SA. 


USE EXTERNAL PULL-UP 
RESISTOR 
CONFIGURE RY/SY# 
TO DEFAULT 
LEVEL 
t.40DE 


4.0 SOFTWARE 
DESIGN AND 
UPGRADABILITY 
CONSIDERATIONS 


In order to do a software upgrade to the 28F016SA, the 
software designer must pay attention to a few key areas. 
They can be grouped as follows: 


Device Intelligent Identifier = AOH (versus A2H for 
28FOO8SA) 
Compatible Superset Commands 


Compatible Status Register Checks only 
Number of Erase Blocks 


C0t.4PATI8LE 
COt.4t.4ANDS 


&: 


C0t.4PATI8LE 
STATUS 


REGISTER 
ONLY 
CHECKS 


Device Drivers for the 28FOO8SAand the 28FOl6SA 
are provided in application notes AP-360 and AP-377 
respectively. 


Software drivers written for the 28;FOO8SAneed to rec- 
ognize the new device ID and change the memory size 
boundaries in order to work on a 28FOI6SA-'ied 
sys- 


tem design. 


Note that the 28FOl6SA can be tll'eatedas two 8-Mbit 
memory devices in a single package. The highest order 
address pin A20 is used to switch between the upper 
and the lower I Mbyte flash array. By preserving the 
same basic software driver code, an upgrade to the 
28FOl6SA enables the quickest tirne-to-market. 


] 


RE-WRITE 
SOFTWARE 
DE1~ 


DRIVERS 
..-J 


Bu. 
ComlTUlnd 
Comments 


Operation 


Write 
Word/Byte 
0= 
40Hor10H 


Write 
A=X 


Write 
0= 
WD 


A= 
WA 


Read 
Q ~ CSRD 


Toggle 
CEo#, 
CEl #, or 
OE # to update 
CSRD. 
A~X 


Standby 
Check 
CSR.7 


1 ~ WSMReady 


o ~ WSMBusy 


Repeat 
for subsequent 
Word/Byte 
Writes. 


CSR Full Status 
Check 
can be done after each Word/Byte 


Write, or after a sequence 
of Word/Byte 
Writes. 


Write 
FFH after the last operation 
to reset device 
to Read 


Array 
Mode. 


See Command 
Bus definitions 
in the 28F016SA 
User's 


Manual 
for description 
of codes. 


Bu. 
Command 
Comment. 
Operation 


Standby 
CheckCSR.4 


1 = 
Data Write Unsuccessful 


o = 
Data Write Successful 


Standby 
CheckCSR.3 


1 = Vpp Low Detect 


0= 
VppOK 


CSR.3/4 
SHOULD 
be cleared, 
if set, before 
further 
attempts 
are initiated. 


• 


Bus 
Command 
Comments 
Operation 


Write 
Block 
Erase 
D = 
20H 


A=X 


Write 
Confirm 
D = 
DOH 


A = 
BA 


Read 
a = 
CSRD 


TC'9gle CEo#, 
CE1 #, or 


OE# 
to update 
CSRD. 


A~X 


Standby 
CheckCSR.7 


1 = WSM 
Ready 


0= 
WSM 
Busy 


Repeat 
for subsequent 
Block 
Erasures. 


CSR Full Status 
Check 
can be done after each 
Block 
Erase, 


or after a sequence 
of Block 
Erasures. 


Write 
FFH after the last operation 
to rl~set device 
to Read 


Array Mode. 


See Command 
Bus definitions 
in the :!8F016SA 
User's 


Manual 
for description 
of codes. 


Bus 
Command 
Comments 
Operation 


Standby 
CheckCSFL5 


1 ~ 
Erase 
Error 


o ~ Erase 
Successful 


Standby 
Check 
CSA'.3 


1 = 
Vpp Low Detect 


o ~ VppOI< 


Standby 
Check 
CSA.4, 
5 


Both set to 1 = 
Command 
Sequence 
Error 


CSR.3/4/5 
SHOULD 
be cleared, 
if set, before 
further 
attempts 


are initiated. 
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Bus 
Commsnd 
Comments 
Operation 


Write 
Erase 
D = 
BOH 
Suspend 
A~X 


Read 
a ~ CSRD 


ToggleGEo#, 
GE, #. orOE# 


to update 
CSRD. 


A=X 


Standby 
GheckCSR.7 


1 = WSMReady 


0= 
WSMBusy 


Standby 
GheckCSR.6 


1 ~ 
Erase Suspended 


o ~ Erase Completed 


Write 
Read Array 
D = 
FFH 


A=X 


Read 
a ~ AD 


Read must be from block 
other 


than the one suspended. 


Write 
Erase 
D ~ 
DOH 
Resume 
A~X 


see Command 
Bus definitions 
in the 28F016SA 
User's 


Manual 
for description 
of codes. 
• 


grade and to point out the key issues that the hardware 
and software designers must analyze during this pro- 
cess. 
This application note summarizes the upgrade consid- 
erations and compatibility areas between the 28FOl6SA 
and the 28FOO8SA.It is merely intended as a simple 
guideline to achieve a density and/or performance up- 
Consult the referenced documentation 
for a complete 
understanding of compatibility a,nd device capabilities. 
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290469 
297372 
290490 
2921.26 
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This application note provides example software code 
for word writing, block erasing, and otherwise control- 
ling Intel's 28FOl6SA 16 Mbit symmetrically blocked 
FlashFile™ memory. Two programming languages are 
provided: high-level "C" for broad platform support, 
and more optimized ASM86 assembly. In many cases, 
the driver routines can be inserted "as is" into the main 
body of code being developed by the system software 
engineer. Extensive comments are included ~neach r.ou- 
tine to facilitate adapting the code to speCificapphca- 
tions. 


The internal automation of the 28F016SA makes soft- 
ware timing loops unnecessary and results in platform- 
independent code. The following example code is ~e- 
signed to be executed in any type of memory and w~th 
all processor clock rates. "C" code can be used wI.th 
many 
microprocessors 
and 
microcontrollers, 
while 
ASM86 assembly code provides a solution optimized 
for Intel microprocessors and embedded processors. 


The 28FOI6SA, like the 28F008SA, is divided into 64 
Kbyte blocks. Since the GSR and BSR are defined rela- 
tive to the nearest preceding block beginning address, I 
often refer to this "block base" address in the com- 
ments. 


Assumptions: 
• Pointers (in C) or EDI offsets (in ASM86) are 4 
bytes long, providing a flat addressing space over 
the entire 28FOl6SA device. This implies the use of 
386 or higher machines. If the code is to be run on a 
machine with a smaller address space, the code must 
be modified to include some sort of "windowing" 
scheme which maps segments of flash into system 
memory. The Intel 82365 is commonly used for this 
purpose. 
• "Ints" are 16-bit and "longs" 32-bit in C. 
• There exists a function which can toggle an individ- 
ual 28FOl6SA pin, given the pin number. 


• The C code can access -a function which derives the 
corresponding block base address from any given 
address. 


• BYTE'" pin on the device determines whether ad- 


dressing refers to words or bytes. I assume word 
writes/reads to a single device. The code should be 
valid, however, for pairs 28F016SAs in byte mode. 


• 28FOl6SA commands can be written to any address 


in the block or device to be affected by that com- 
mand. Note that a word-long command written to 
the last byte in a block will overlap into the first byte 
of the next block. 


Both the C and ASM86 code in this document contain 
the following routines, in this order: 


compatible_blocLerase 
(compatible with ~8F008S~) 


compatible_suspend_to-Jead 
(compatible 
With 


28F008SA) 
compatible_byte_write 
(compatible with 28FOO8SA) 


ESIL-blocLerase 
ESIL-status_checLafter_erase 
ESIL-status_checLafter_ 
write 
ESIL-suspend_to_read 
ESIL- word_write 
erase_aILunlocked_blocks 
locLblock 
status_upload 
pagebuffer_ write_to_flash 
sequentiaLpagebuffer_Ioad 
single_pagebuffer_load 
two_byte_ 
write 
write_durin8--erase 


ABOUT 
THE 28F016SA 


Companion 
product 
datasheets 
fur the 
28FOl6SA 
should be reviewed in conjunction with this application 
note for a complete understanding of the device. 


The example code makes extensive use of bit-masking 
when interpreting the status registers. As a quick re- 
view note that any bit in a register can be tested by 
bitwise ANDing the register with the appropriate pow- 
er of two. Since all of the bits other than the one being 
tested are masked out, testing the resulting byte for 
truth is the same as testing the desired bit for truth. For 
example, if a register contains 01001010, the test for bit 
3 would be ANDing the register withסס OO1000,or hex 
8, and testing the result for truth: 


Binary 
01001010 
& 00001000 
= 00001000 


Hex 
4A 
&08 
= 08 


Register 
Mask for bit 3 
Result 


In this case the result byte is true, indicating that bit 3 
in the register was a 1. 


• 


The meanings of the individual 
bits of these registers 


are presented here for reference. Note that 
there are 


two status register spaces, both of which 
are distinct 


from the flash memory array address space. In the CSR 
space, the CSR is mapped to every address. In the ESR 
space, the GSR is mapped two words above the base of 
each 
64 
Kbyte 
block, 
i.e. to 
addresses 2, 
SOO2H, 
lOOO2H, etc. (in word mode), while each BSR is simi- 
larly mapped one word above the base of each 64 Kbyte 
block 
to locations 
I, SOOIH, 
lOOOIH, 
etc. (in 
word 


mode), each BSR reflecting the status of its own block. 


CSR.7 
Write State Machine 
1= ready 


Status 
0= 
busy 


CSR.6 
Erase-suspend Status 
1= erase suspended 
0= 
erase in 
progress/ 
completed 


CSR.5 
Erase Status 
1= error in block 
erase 
0= 
successful block 
erase 


CSR.4 
Data-write Status 
1= error in data write 
0= 
successful data 
write 


CSR.3 
Vpp Status 
1= Vpp low detect! 


operation aborted 
0= VppOKwhen 
operation 
occurred 


CSR.2 
Reserved for future 
use 


CSR.1 
Reserved for future 
use 


CSR.O 
Reserved for future 
use 


GSR.7 
Write State Machine 
1= ready 


Status 
0= 
busy 


GSR.6 
Operation-suspend 
1= operation 


Status 
suspended 


0= 
operation in 
progress/ 
completed 


GSR.5 
Device Operation 
1= operation 


Status 
unsuccessful 


0= 
operation 
successful or 
running 


GSR.4 
Device Sleep Status 
1= device in sleep 
0= 
device not in 
sleep 


GSR.3 
Queue Status 
1= queue full 


(I= queue available 


GSR.2 
Page Buffer 
1= one/two page 


Availability 
buffers available 


(I= no page buffers 
available 


GSR.1 
Page Buffer Status 
1= selected page 


buffer ready 


(I = selected page 


buffer busy 


GSR.O 
Page Buffer Select 
1= page buffer 1 


Status 
selected 
(I= page buffer 0 


selected 


BSR.7 
Block Status 
1= ready 
0= 
busy 


BSR.6 
Block-lock Status 
1= block unlocked 
for write/ erase 


0= 
block locked to 
write/erase 


BSR.5 
Block Operation 
1= error in block 


Status 
operation 


.0= successful block 
operation 


BSR.4 
Block Operation Abort 
1= block operation 


Status 
aborted 


0= 
block operation 
not aborted 


BSR.3 
Queue Status 
1= device queue full 
0= 
device queue 
available 


BSR.2 
Vpp Status 
1= Vpp low detected 
0= 
VppOKwhen 
operation 
occurred 


BSR.1 
Reserved for future 
use 


BSR.O 
Reserved for future 
use 


The 28F016SA command 
set is a superset 
of the 
28F008SA command 
set, giving existing 28F008SA 
code the ability to run on the 28F016SA with minimal 
modifications. 


00 
invalid/reserved 


20 
single block erase 
40 
wordlbyte write 
50 
clear status registers 
70 
read CSR 
90 
read ID codes 


BO 
erase suspend 
DO 
confirm/resume 
FF 
read flash array 


"D~Ul o~"t"'erTo.-manCe-c,flllilll\ia'lllc;ll' 
Commands 


OC 


71 


72 


74 


75 
77 


80 
96,01 
96,02 
96,03 


96,04 


97 


99 


A7 


EO 
FO 
FB 


page buffer write to flash 
read GSR and BSRs (i.e. the ESR) 


page buffer swap 
single load to page buffer 
read page buffer 
lock block 
abort 


RY/BY# 
enable to level-mode 
RY/BY # pulse on write 
RY/BY # pulse on erase 
RY/BY# 
pin disable 


upload BSRs with lock bit 
upload device information 
erase all unlocked blocks 
sequential load to page buffer 


sleep 
two-byte write 
• 
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/****************************************************************************/ 
/* Copyright Intel Corporation, 1993 
*/ 
/* Example C Routines for the 28F016SA Flash memory component 
*/ 
/* Patrick Killelea, Intel Corporation 
*/ 
/* Revision 1.0, 25 June 1993 
*/ 
/* 
*/ 
/* NOTE: BYTE# pin on the device determines whether addressing 
*/ 
/* refers to words or bytes. I assume word mode. 
*/ 
/* NOTE: A 28F016SA command can be written to any address in the 
*/ 
/* block or device to be affected by that command. 
*/ 
/****************************************************************************/ 


void set_pin(int pin, int level) 
{ 
/* set_pin is an implementation-dependent function which sets a 
/* given pin on the standard 28F016SA pinout HIGH = 1 or LOW = o. 
I 


int *base(int*address) 
{ 
/* base is an implementation-dependent function which takes an 
/* address in the flash array and returns a pointer to the base 
/* of that 64 Kbyte block. 
I 


intel~ 


int compatible_block_erase(int*address) 
I 
1* This procedure 
erases a 64 Kbyte block on the 28F016SA. 
1* It also works with a pair of 28F008SAs. 
int CSR; 
1* CSR variable 
is used to return 
contents 
of CSR register. 


*address = OX2020; 
1* Single Block Erase 
command 
*address = OXDODO; 
1* Confirm 
command 
while (!(OX0080 & *address)) 
1* Poll CSR until 
CSR.7 = I (WSW ready) 
I 
1* Erase may be suspended 
here to write to a different 
block. 
I; 
1* At this point, 
CSR.7 is 1, indicating 
WSM is not busy. 
1* Note that we are still reading 
from CSR by default. 
CSR = *address; 
1* Save CSR before 
clearing 
it. 
*address = OX5050; 
1* Clear Status Registers 
command 
return(CSR) ; 
1* Return 
CSR to be checked 
for status of operation. 
I 


int compatible_byte_write{int-,-sddress, int data) 
( 
1* This procedure 
writes 
a byte to the 28FOI6SA. 
1* It also works with the 28F008SA. 
int CSR; 
1* CSR variable 
is used to return 
contents 
of CSR register. 


*address = OXIOIO; 
1* Word Write 
command 


*address = data; 
1* Actual 
data write 
to flash address. 
while {!(OX0080 
&: *address)) ; 
1* Poll CSR until 
CSR.7 = I (WSM ready) 


CSR = *address; 
1* Save CSR before 
clearing 
it. 


*address = OX5050; 
1* Clear Status Registers 
command 


return{CSR) ; 
1* Return 
CSR to be checked 
for status of operation. 
l 


{ 
/* This procedure 
suspends 
an erase operation 
to do a read. 
/* It also works with a pair of 28F008SAs. 
int CSR; 
/* CSR variable 
is used to return contents 
of CSR register. 


/* Assume 
erase is underway 
in block beginning 
at erase_address. 
*erase_address = OXBOBO; 
/* Erase 
Suspend 
command 
while (!(OX0080 
/I: *erase_address)) ; 
/* Poll CSR until 
CSR.7 = I (WSM ready) 


*erase_address = OXFFFF; 
/* Read Flash Array 
command 


*result = *read_address; 
/* Do the actual 
read. Any number 
of reads can be done here. 
if 
(OX0040 
/I: *erase_address) 
/* If CSR.6 = I (erase incomplete) 


*erase_address = OXDODO; 
/* Erase Resume 
command 
CSR = *erase_address; 
/* Save CSR before 
clearing 
it. 


*erase_address = OX5050; 
/* Clear Status Registers 
command 
return(CSR) ; 
/* Return 
CSR to be checked 
for status of operation. 
I 


int device_information_upload(int*address) 
/*This procedure uploads the device revision number to the variable GSR_DSR.*/ 
[ 
int GSR_DSR: 
/*DSR variable is used to return device revision status. 
*/ 
int *block_base = base (address) ; 
*/ 
/*Find pointer to base of 32K word block. 
*/ 


*address = OX7l7l; 
/*Read Extended Status Registers command 
while 
(OX0008 & *(block_base + 2)); 


/*Poll GSR until GSR.3 = 0 (queue available). 
while 
(!(OX0080 & *(block_base + 2))); 
/*Poll GSR until GSR.7 = 1 (WSM available). 
*address = OX9999; 
/*Device information Upload command 
*address = OXDODO; 
/*Confirmation command 
*address = OX7l7l; 
/*Read Extended Status Registers command 
while 
(!(OX0080 & *(block_base + 2))); 
/*Poll GSR until GSR.7 = 1 (WSM not busy) 
*address = OX7272; 
/*Swap page buffer to bring buffer with status information to top. 
*address = OX7575; 
/*Read Page Buffer command 
GSR_DSR = (*(block_base + 3) & OXOOFF) ; 
/*Put device revision code in bottom byte of return value. 
/*Note that device revision code was read from word 3 in page buffer. 
*address = OX7l7l; 
/*Read Extended Status Registers command 
GSR_DSR += 
(*(block_base + 2) & OXFFOO) ; 


/*Put GSR in top byte of return value. 
/*User should check GSR for operation success 
*address = OX5050; 
/*Clear Status Registers command 
return(GSR_DSR) ; 
I 


int ESR_block_erase(int*erase_address) 
/* This procedure 
erases a block on the 28F016SA. 


( 
int ESR; 
/* ESR variable 
is used to return contents of GSR and BSR. 


int*block_base = base (erase_address) ; 
/* Find address of base of block being erased. 
*erase_address = OX7l7l; 
/* Read Extended 
Status Registers 
command 


while 
(OX0008 & *(block_base 
+ 1)); 


/* Poll BSR until BSR.3 of erase_address = 0 (queue available). 
/* BSR is 1 word above base of target block in ESR space. 


*erase_address = OX2020; 
/* Single Block Erase command 
*erase_address = OXDODO; 
/* Confirm command 
*erase_address = OX7l7l; 
/* Read Extended 
Status Registers 
command 


while 
(!(OX0080 & *(block_base 
+ 1))); 


/* Poll BSR until BSR.7 of target erase_address = 1 (block ready). 


ESR = (*(block_base + 2) & OXFFOO) + (*(block_base + 1) & OXOOFF) ; 
/* Put GSR in top byte and BSR in bottom byte of return value. 
*erase_address = OX5050; 
/* Clear Status Registers 
command 


return(ESR) ; 
I 


int ESR_suspend_to_read(int*address,int*result) 
/* This procedure 
suspends an erase on the 28F016SA. 


( 
/* Address 
is assumed to point to location to be read. 


/* result is used to hold read value until procedure 
is complete. 


int ESR; 
/* ESR variable 
is used to return contents of GSR and BSR. 


int*block_base = base(address) ; 


*address = OX7l7l; 
/* Read Extended 
Status Registers 
command 


while 
(!(OX0080 & *(block_base + 1))); 
/* Poll BSR until BSR.7 of target address = 1 (block ready). 
/* BSR is 1 word above base of target block in ESR space. 
*address = OXBOBO; 
/* Operation 
Suspend command 


*address = OX7l7l; 
/* Read Extended 
Status Registers 
command 


while 
(!(OX0080 & *(block_base 
+ 2))); 
/* Poll GSR until GSR.7 = 1 (WSM ready). 
*address = OXFFFF; 
/* Read Flasn Array command 
*result = *address; 
/* Read the data. 
if (OX0040 & *(block_base 
+ 2)) 
/* If GSR.6 indicates an operation was suspended 
on this device, 


*address = OXDODO; 
/* then resume the operation. 


ESR = (*(block_base + 2) & OXFFOO) + (*(block_base + 1) & OXOOFF) ; 
/* Put GSR in top byte and BSR in bottom byte of return value. 
*address = OX5050; 
/* Clear Status Registers 
command 


return(ESR) ; 
I 


• 
.J!!! 
( 
int 
ESR; 
/* ESR 
variable 
is used 
to 
return 
contents 
of 
GSR 
and 
BSR. 


int*block_base 
= base (write_address) 
; 


*write_address 
= OX7171; 
/* Read 
Extended 
Status 
Registers 
command 


while 
(OX0008 
& *(block_base 
+ 1)); 


/* Poll 
BSR 
until 
BSR.3 
of target 
address = 0 
(queue 
available). 


/* BSR 
is 
1 word 
above 
base 
of target 
block 
in 
status 
reg 
space. 


*write_address 
= OX1010; 
/* Write 
word 
command 
*write_address 
= data; 
/* Write 
actual 
data. 
*write_address 
= OX7171; 


/* Read 
Extended 
Status 
Registers 
command 


while 
(!(OX0080 
& 
*(block_base 
+ 1))); 


/* Poll 
BSR 
until 
BSR.7 
of target 
address 
= 1 
(block 
ready). 


ESR = 
(*(block_base 
+ 2) & OXFFOO) 
+ 
(*(block_base 
+ 1) & OXOOFF) 
; 


/* Put 
GSR 
in top 
byte 
and 
BSR 
in bottom 
byte 
of 
return 
value. 


*write_address 
= OX5050; 


/* 
Clear 
Status 
Registers 
command 


return(ESR) 
; 
l 


*/ 


*/ 


*/ 
*/ 


*/ 


*/ 


*/ 


*/ 


*/ • 


*/ 


( 
int 
GSR; 
/* Return 
value 
will 
contain 
GSR 
in both 
top 
and 
bottom 
byte. 
/* 
32 bit 
long 
pointed 
to 
by 
failure_list 
is used 
to 
return 
map 


/* 
of block 
failures, 
each 
bit 
representing 
one 
block's 
status. 
/* device_address 
points 
to 
base 
of 
chip. 


int 
block; 
/* block 
is used 
to hold 
block 
count 
for 
loop 
through 
blocks. 


long 
power 
= 
1; 


• 
I 
• 


*/ 
*/ 
*/ 
*/ 


*/ 


*/ 


*/ 


*/ 


*/ 


*/ 


*/ 


*/ 


*/ 
*/ 


*/ 


*/ 


*/ 


*/ 


*/ 


*failure_list 
= 0; 
/* 
Initialize 
all 
32 bits 
of 
failure 
list 
long 
to 
O. 


*device_address 
= OX7171; 


/* Read 
Extended 
Status 
Registers 


while 
(OX0008 & *(device_address 
+ 1)); 


/* Poll 
BSR 
until 
BSR.3 
of target 
address 
= 0 
(queue 
available). 
*device_address 
= OXA7A7; 


/* Full-chip 
erase 
command 


*device_address 
= OXDODO; 
/* 
Confirm 
command 
*device_address 
= OX7171; 
/* Read 
Extended 
Status 
Registers 
command 


while 
(!(OX0080 
& *(device_address 
+ 2))); 
/* Poll 
GSR 
until 
GSR.7 
= 1 
(WSM 
ready) 


for 
(block 
= 0; 
block 
< OX0020; 
block++) 


{ 
/* 
Go 
through 
blocks, 
looking 
at 
each 
BSR.5 
for 
operation 
failure 


/* and 
setting 
appropriate 
bit 
in long 
pointed 
to 
by 
failure 
list. 
if 
(OX0020 
& *(device_address 
+ block 
*OX8000 
+ 1)) 


/* Multiply 
block 
by 
32K 
words 
to 
get 
to 
the 
base 
of 
each 
block. 
*failure_list 
+ = power; 
/* 
If the 
block 
failed, 
set 
that 
bit 
in the 
failure 
list. 


power 
*= 2; 
/* 
Increment 
to 
next 
power 
of two 
to 
access 
next 
bit. 
I 


GSR 
= 
*(device_address 
+ 2) ; 
/* Put 
GSR 
in both 
bytes 
of 
return 


*device_address 
= OX5050; 


/* 
Clear 
Status 
Registers 
command 


return(GSR) 
; 
l 


int 
lock_block(int*lock_address) 
/* 
This 
procedure 
locks 
a block 
on the 
28F016SA. 
{ 
int 
ESR; 
/* ESR 
variable 
is used 
to 
return 
contents 
of 
GSR 
and 
BSR. 
#define 
WPB 
56 
/* Write 
Protect 
pin 
(active 
low) 
is pin 
number 
56 
on 
standard 
/* pinout 
of 28F016SA. 
#define 
VPP 
15 
/* Vpp 
pin 
is pin 
number 
15 
on 
standard 
pinout 
of 28F016SA. 
#define 
HIGH 
1 
#define 
LOW 
0 


int*block_base 
= base (lock_address) 
; 
/* Find 
pointer 
to 
base 
of block 
being 
locked. 


*lock_address 
= OX7l7l; 
/* Read 
Extended 
Status 
Registers 
command 
while 
(OX0008 & *(block_base 
+ 2)); 
/* Poll 
GSR 
until 
GSR.3 = 0 
(queue 
available). 
seLpin(WPB. 
HIGH); 
/* Disable 
write 
protection 
by 
setting 
WPB 
high. 
seLpin(VPP. 
HIGH) ; 
/* Enable 
VPP. 
wait 
for 
ramp 
if necessary 
in this 
system. 
*lock_address 
= OX7777; 
/* Lock 
Block 
command 
*lock_address 
= OXDODO; 
/* 
Confirmation 
command 
*lock_address 
= OX7l7l; 
/* Read 
Extended 
Status 
Registers 
command 
while 
(!(OX0080 
& *(block_base 
+ 2))); 
/* 
GSR 
is 2 words 
above 
0; poll 
GSR 
until 
GSR.7 = 1 
(WSM ready). 


ESR = 
(*(block_base 
+ 2) & OXFFOO) 
+ (*(block_base 
+ 1) & OXOOFF) 
; 
/* Put 
GSR 
in top 
byte 
and 
BSR 
in bottom 
byte 
of 
return 
value. 


*lock_address 
= OX5050; 
/* 
Clear 
Status 
Registers 
command 
return(ESR) 
; 
l 


int status_upload (int*address) 
/* This procedure uploads status information into the ESR from non·-volatile */ 
/* status bits. 
*/ 
( 
int ESR; 
/* ESR variable is used to return contents of GSR and BSR. 
*/ 
int*block_base = base(address) ; 
/* Find pointer to base of 32K word block. 
*/ 


*address = OX7171; 
/* Read Extended Status Registers command 
while 
(OX0008 & *(block_base + 2)); 
/* Poll GSR until GSR.3 = 1 (queue available). 
*address = OX9797; 
/* Lock-status Upload command 
*address = OXDODO; 
/* Confirmation command 
*address = OX7171; 
/* Read Extended Status Registers command 
while 
(!(OX0080 & *(block_base + 2))); 


1* Poll GSR until GSR.7 = 1 (WSM not busy) 


ESR = (*(block_base + 2) & OXFFOO) + (*(block_base + 1) & OXOOFF) ; 
1* Put GSR in top byte and BSR in bottom byte of return value. 
*address = OX5050; 
1* Clear Status Registers command 
return(ESR) ; 
l 
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( 
/* This routine 
assumes page buffer 
is already 
loaded. 


/* Address 
is where 
in flash array to begin writing. 


/* Low byte of byte_count 
must be 256 or fewer, high must be O. 


/* High byte exists 
for future Page Buffer 
expandability. 


int ESR; 
/* ESR variable 
is used to return contents 
of GSR and BSR. 


int*block_base = base (address) ; 
/* Find pointer 
to base of block to be written. 


*address = OX7171; 
/* Read Extended 
Status Registers 
command 


while 
(OX0008 
a: *(block_base 
+ 1»; 


/* Poll BSR until BSR.3 
of target address = 0 (queue available). 


*address = OXOCOC; 
/* Page Buffer Write to Flash 
command 


*address = byte_count; 
/* Only AO valid here; 
low or high byte loaded depending 
on AO. 


*address = byte_count; 
/* AO internally 
complemented; 
alternate 
byte loads; write 
starts 


*address = OX7171; 
/* Read Extended 
Status Registers 
command 


while 
(! (OX0080 a: * (block_base + 1») 
; 
/* Poll BSR until BSR.7 
of target address = 1 (block ready). 


ESR = (*(block_base + 2) 
a: OXFFOO) + (*(block_base + 1) 
a: OXOOFF) ; 
/* Put GSR in top byte and BSR in bottom byte of return value. 
*address = OX5050; 
/* Clear Status Registers 
command 


return(ESR) ; 
l 


void sequential_pagebuffer_load(int*device_address, 
char*start_address, 
int word_count, 
int* data) 


1* This procedure 
loads a multiple 
bytes to a page buffer. 
I 
1* Low byte of word_count 
must be 128 or fewer, high must be O. 


1* High byte exists 
for future Page Buffer 
expandability. 


char counter; 
1* counter 
is used to keep track of bytes written. 


*device_address = OX7171; 
1* Read Extended 
Status Registers 
command 


while 
(! (OX0004 a: * (device_address 
+ 2))) ; 


1* Poll GSR until 
GSR.2 = 1 (page buffer available). 


*device_address = OXEOEO; 
1* Sequential 
Page Buffer Load command 


*start_address = word_count; 
1* Loads high or low byte of count register, 
depending 
on AO 


*start_address = word_count; 
1* Automatically 
loads alternate 
byte of count register 


for 
(counter = 0; counter 
< word_count; 
counter++) 


*(start_address 
+ counter) = data[counter]; 


1* Loop through 
data, writing 
to page buffer. 


1* This routine does not affect 
status registers. 
I 


inteJ~ 


AP-377 


data) 


*/ 


*/ 


*/ 


*/ 


*/ 
*/ 


*/ 
*/ 


*/ 


*/ 


*/ 


*/ 


*/ 


*/ 


*/ 


*/ 


*/ 


*/ 
*/ 


*/ 


*/ 


void single_pagebuffer_load(int*device_address, 
char*address, 
int 
/* This procedure 
loads a single byte or word to a page buffer. 


{ 
*device_address = OX7171; 
/* Read Extended 
Status Registers 
command 
while 
(!(OX0004 & *(device_address 
+ 2))); 
/* Poll GSR until GSR.2 = 1 (page buffer available) 
*device_address = OX7474; 
/* Single Load to Page Buffer command 
*address = data; 
/* Actual write to page buffer 
/* This routine does not affect status registers. 
} 


int two_byte_write(int*address, 
char data_low, 
char data_high) 
/* This routine is used when BYTE# is low, i.e. the 28F016SA 
/* is in byte mode, to emulate a word write. 
{ 
int ESR; 
/* ESR variable 
is used to return contents of GSR and BSR. 
int*block_base = base (address) ; 
/* Find pointer to base of block. 


*address = OX7171; 
/* Read Extended 
Status Registers 
command 


while 
(OX0008 & *(block_base 
+ 1)); 
/* Poll BSR until BSR.3 of target address = 0 (queue available). 
*address = OXFBFB; 
/* Two-byte Write command 
*address = data_low; 
/* Load one byte of data register; AO = 0 loads low byte, Al high 
*address = data_high; 
/* 28F016SA automatically 
loads alternate 
byte of data register 


/* Write is initiated. Now we poll for successful 
completion. 


*address = OX7171; 
/* Read Extended 
Status Registers 
command 


while 
(!(OX0080 & *(block_base 
+ 1))); 
/* Poll BSR until BSR.7 of target address = 1 (block ready). 
/* BSR is 1 word above base of target block in status reg space. 


ESR = 
(*(block_base + 2) & OXFFOO) + (*(block_base + 1) & OXOOFF) ; 
/* Put GSR in top byte and BSR in bottom byte of return value. 
*address = OX5050; 
/* Clear Status Registers 
command 


return(ESR) ; 
I 


/* This procedure 
writes to one block while another 
is erasing. 


( 
int ESR; 
/* ESR variable 
is used to return contents of GSR and BSR. 


int*block_base = base (erase_address) ; 
/* Find pointer to base of block being erased. 


*erase_address = OX7171; 
/* Read Extended 
Status Register 
command 


while 
(OX0008 & *(block_base 
+ 1)); 
/* Poll BSR until BSR.3 of target address = 0 (queue available). 
/* BSR is 1 word above base of target block in ESR space. 
*erase_address = OX2020; 
/* Erase Block command 
*erase_address = OXDODO; 
/* Confirm command 
*write_address = OX4040; 
/* Word Write command 
*write_address = data; 
/* Write actual data. 
/* Erase suspends, write takes place, then erase resumes. 
*erase_address = OX7171; 
/* Read Extended 
Status Registers 
command 


while 
(!(OX0080 & *(block_base + 1))); 
/* Poll BSR until BSR.7 of erase address = 1 (block ready). 
/* BSR is 1 word above base of target block in status reg space. 


ESR = (*(block_base + 2) & OXFFOO) + (*(block_base + 1) & OXOOFF) ; 
/* Put GSR in top byte and BSR in bottom byte of return value. 
*block_base = OX5050; 
/* Clear Status Registers 
command 


return(ESR) ; 
I 


Copyright Intel Corporation, 1993 
EXAMPLE ASM86 Drivers for the 28F016SA Flash memory component 
Patrick Killelea, 
Intel Corporation 
Revision 
1.0, August 6, 1993 
NOTE: 
The code assumes 32-bit flat model protected mode for simplicity. 
i.e. ES contains 0 and EDI accesses the entire memory space. 


segment byte 
public 
assume 
cs:TEXT 


Following 
is the structure 
params STRUCT 
erase_addr 
write_addr 
write_base 
read_addr 
read_base 
lock_addr 
data_addr 
data 
pagebuffer_start_addr 
pagebuffer_word_count 


by which all parameters are passed. 


DD 
? 
base of block or device to erase 
DD 
? 
address to write to 
DD 
? 
base address of block written to 
DD 
? 
address to read from 
DD 
? 
base address of block read from 
DD 
? 
base address of block to lock 
DD 
? 
address of data to write 
DW 
? 
data word to write 
DB 
? 
start address in page buffer 
DW 
? 
number of words for pb 
read/write 


MACRO 
set-pin 
This macro pushes parameters needed for the set_pin routine, calls 
set_pin, and then pops those parameters. 
set_pin is an implementation- 
dependent 
function which sets a given pin on the standard 28F016SA 
pinout HIGH = 1 or LOW = O. 


Data needed at the beginning of this macro: 
pin: 
28F016SA pin number 
level: 
level to set pin 
Trashes: CX 


set_pin 
push 
push 
call 
pop 
pop 


pin, level 
pin 
level 
near ptr set_pin 
CX 
CX 


Push pin number of Write Protect#, 
Push logic level of pin 
Call set_pin 
Pop off parameters 


PROCEDURE 
compatible_block_erase 
This procedure 
erases a 64 Kbyte block on the 28F016SA. 
It also works with a pair of 28F008SAs. 
Param fields needed: 
erase_address: 
offset of base of 28F016SA block to erase 
Output 
BX: CSR, duplicated in both high and low bytes 


compatible_block_erase 
proc 
near 
mov 
EDI,params.erase_addr 
mov 
ES:[EDI),2020H 
; Block Erase command 
mov 
ES:[EDI),DODOH 
; Erase Confirm command 
Note that it is not strictly necessary to write an erase command to 
the base of a block; any address within the block will do. 


WSM_not_ready2: 


mov 
AX,ES:[EDI) 
test 
AX,80H 


; Erase may be suspended here to 
jz 
short WSM_not_ready2 


; Poll CSR until CSR.7 = 1, 


; Read CSR. 
; If CSR.7 = 0, test sets ZF. 
write to a different block. 
; Loop while ZF is set. 
indicating that WSM is ready. 


BX,AX 
ES: [EDI),5050H 
Return CSR in BX. 
Clear Status Registers 
command 


ret 
compatible_block_erase 


intel~ 


PROCEDURE 
compatible_byte_write 
This procedure writes a byte to the 2BF016SA. It also works with the 
2BFOOBSA. 
Param fields needed: 


params.data: data word to be written 
params.write_addr: 
offset of 2BF016SA address to write 
Output: 
BX: CSR, duplicated in both high and low bytes 


compatible_byte_write 
proc 
near 


mov 
EDI,params.write_addr 


mov 
ES:[EDIl,lOlOH 


mov 
ES:[EDIl,params.data 


; Write data to 2BF016SA. 


WSM_not-readyl: 
mov 
AX,ES:[EDIl 


test AX,BOH 
jz 
short WSM_not_readyl 


; Poll CSR until CSR.7 = 1, 


Read CSR 
Look at CSR.7. 
Loop while CSR.7 = O. 
indicating that WSM is ready. 


mov 
BX,AX 


mov 
ES:[EDIl,5050H 


ret 
compatible_byte_write 
endp 


Return CSR in BX. 
Clear Status Registers command 
Return to calling routine. 
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;================================================================::====== 


PROCEDURE 
compatible_suspend_to_read' 


This procedure 
suspends an erase operation to do a read. 
It also works with a pair of 28F008SAs. 
It assumes that erase is underway. 
Param fields needed: 
params.erase_addr: 
offset of 28F016SA block to erHse 


params. read_addr: offset of 28F016SA address to rlJad 


Output: 
BX: CSR, duplicated in both high and low bytes 


CX: data read from the address in params. read_add]' 


erase_suspend 
mov 
mov 


proc 
near 


EDI,params.erase_addr 
ES:[EDIl,BOBOH 
Set up offset of erase address. 
Erase Suspend command 


mov 
AX,ES:[EDIl 
Read CSR from any addross. 
test AX,80H 
jz 
short not_ready 


; Poll CSR until CSR.7 = I, indicating that WSM is ready. 


mov 
EDI,params.read_addr 


mov 
ES:[EDIl,FFFFH 


mov 
CX,ES: [EDIl 


; Arbitrary number of reads can 
mov 
ES:[EDIl,7070H 


mov 
AX,ES:[EDIl 


test AX,0040H 


jz 
short continue 


mov 
EDI,params.erase_addr 


mov 
ES:[EDIl,DODOH 


Set up offset of read Hddress. 
Read Flash command 
Do actual read; put reBult in CX. 
be done here. 
Read CSR command 
Read CSR from any addross. 
If CSR.6 = 0, indicating that 
there is no erase susponded, 
jump to continue. 
Else set up offset of orase block. 
Erase Resume command 


mov 
BX,AX 
ret 
erase_suspend 
endp 


Return CSR in BX. 
Return to calling routJ.ne. 


:-----------------------===--==--====--============ 
PROCEDURE 
device_information_upload 
This procedure uploads status information into the page buffer. 
Param fields needed: 
params.write_base: 
offset of 28F016SA device 
Output: 
OX: Device revision number 
AX, CX: trash 


status_upload 
mov 
mov 
inc 
inc 


q_unavallable2: 
mov 
test 
jne 
: Poll 
wsm_busy: 
mov 
test 
je 
:Poll 


WSM_busy2: 
mov 
test 
jz 
:Poll 


proc 
near 
EDI,params.write_base 
ES: [EDI],7171H 
EDI 
EDI 


:Read ESR command. 
:Move EDI up to GSR. 


AX,ES:[EDI] 
AX,8 
short q_unavailable2 
GSR while GSR.3 = I, indicating 


AX,ES: [EDI] 
AX,80H 
short wsm_busy 
GSR while GSR.7 = 


ES: [EDI],9999H 


ES: [EDI],DODOH 
ES: [EDI],7171H 


:Device information Upload 
command 
:Confirmation command 
:Read ESR command 


AX,ES: [01] 
AX,80H 
short WSM_busy2 
GSM while GSR.7 =0, 


mov 
ES:[EDI],7272H 
:Swap Page Buffer command 
mov 
ES:[EDI],7575H 
:Read Page Buffer command 
mov 
OX, [params.write_base+3] 
:Put revision number in OX 
;Revision number is-3 words above write_base in page buffer space. 
;GSR.5 should be checked for operation success before using revision 
number. 
ret 
:Return to calling routine. 
status_upload 
endp 
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PROCEDURE 
ESR_block_erase 


This procedure 
erases a block on the 28F016SA. 


Param fields needed: 
params.erase_addr: 
offset of base of 28F016SA block to erase 


Output: 
BX: GSR in high byte and BSR in low byte 


AX, DX: trash 


ESR_block_erase 
proc 
near 
mov 
EDI,params.erase_addr 


mov 
ES:[EDIl,7l71H 


inc 
EDI 


; BSR is 1 word above base of target 64K block in ESR space. 


Set up offset of address. 
Read ESR command 


mov 
AX,ES:[EDIl 
Read BSR 


test AX,8 
jne 
short q_ful14 


; Loop while BSR.3 of target address is 1, meaning queu.efull. 


mov 
ES:[EDIl,2020H 


mov 
ES:[EDIl,DODOH 
mov 
ES:[EDIl,7l71H 


;Note that EDI still contains 


Block Erase command 
Confirm command 
; Read ESR command 
offset of device base + 1. 


wait_BSR74: 
mov 
AX,ES:[EDIl 
Read BSR 


test AX,80H 
jz 
short wait_BSR74 


;Loop while BSR.7 of target address = 0, i.e. block busy. 


mov 
inc 
mov 
mov 
mov 
ret 
ESR_block_erase 


BL,AL 
EDI 
AX,ES: [EDIl 
BH,AH 
ES: [EDIl,5050H 


Store BSR in BL. 
Move EDI up to read GSR. 
Read GSR 
Store GSR in BH. 
Clear Status Registers 
command 


Return to calling routine. 
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PROCEDURE 
ESR_suspend_to_read 
This procedure suspends an erase on the 28FOI6SA. 
Param fields needed: 


params.erase_addr: 
offset of base of erasing 28FOl6SA block 
params.read_addr: 
offset of 28FOl6SA address to read 
Output: 
BX: GSR in high byte and BSR in low byte (of erase block) 


CX: data read from flash 
AX, DX: trash 


suspend_to_read proc 
near 


mov 
EDI,params.erase_addr 


inc 
EDI 


; BSR is I word above base of target 64K block in ESR space. 
mov 
ES:[EDI],717IH 
; Read ESR command 


wait_BSR75: 
mov 
AX,ES:[EDI] 
Read BSR 


test AX,80H 
jz 
short wait_BSR75 


; Loop if BSR.7 of target address is 0, meaning block busy. 


mov 
ES:[EDI],BOBOH 


mov 
EDI,params.read_addr 


mov 
ES:[EDI],717IH 


inc 
EDI 
inc 
EDI 
; GSR is 2 words above base of target 64K block in ESR space. 


Operation Suspend command 
Set up offset of read address. 
Read ESR command 


mov 
AX,ES:[EDI] 
Read GSR 


test AX,80H 
jz 
short WSM_busy3 


; Poll GSR until GSR.7 indicates WSM is ready. 


mov 
CX,AX 


mov 
EDI,params.erase_addr 


inc 
EDI 
inc 
EDI 
; GSR is 2 words above base of target 64K block in ESR space. 
mov 
AX,ES:[EDI] 
Read GSR 


test AX,40H 
jz 
short nothing_suspended 


; If GSR.6 indicates an operation was suspended on this device, 
; then resume the operation. 
mov 
ES:[EDI],DODOH 


nothing_suspended: 
mov 
BH,AH 


dec 
EDI 
mov 
AX,ES: [EDI] 


mov 
BL,AL 
ret 
suspend_to_read endp 


mov 
EDI,params.read_addr 


mov 
ES:[EDI],FFFFH 


mov 
AX,ES:[EDI] 


Set up offset of read address. 
Write Read Flash Array command 
Read the data 


Store the result in CX. 
Set up offset of erase address. 


Store GSR in BH. 
Move EDI down to read BSR. 
Read BSR 
Store BSR in BL. 
Return to calling routine. 


PROCEDURE 
ESR_word_write 
This procedure writes a word to the 28F016SA. 
Param fields needed: 
params.write_base: offset of base of 28F016SA blocltto write 
params.data: data word to write 
params.write_addr: offset of 28F016SA address to write 


Output: 
BX: GSR in high byte and BSR in low byte 
AX, CX, DX: trash 


mov 
mov 
mov 
mov 
inc 
;BSR 


AX,7171H 
EDI,params.write_addr 
ES:[EDI],AX 
EDI,params.write_base 
EDI 
1 word above base of target 64K block in status 


Read ESR command 
Set up offset of write address. 
Write the command. 
Get base of block to write 


mov 
AX,ES:[EDI] 
Read BSR 
test AX,8 
jne 
short q_full 


;Loop while BSR.3 of target address 1, meaning queue full. 


mov 
AX,lOlOH 
Write Byte command 
mov 
EDI,params.write_addr 
Set up offset of write address. 
mov 
ES:[EDI],params.data 
Write actual data. 


mov 
ES:[EDI],7l71H 
Read ESR command 


mov 
EDI,params.write_base 
Set up offset of block base. 


inc 
EDI 


;BSR 1 word above base of target 64K block in status reg space. 


waiLBSR71: 


mov 
AX,ES:[EDI] 
Read BSR 
test AX,0080H 
jz 
short wait_BSR7l 


;Poll BSR while BSR.7 of target address is 0, meaning block busy 


mov 
BL,AL 


inc 
EDI 


;GSR 2 words above base of 
mov 
AX,ES: [EDI] 
mov 
BH,AH 
mov 
AX,5050H 
mov 
EDI,params.write_addr 
mov 
ES: [EDI],AX 
ret 


ESR_word_write 
endp 


target 64K block in status rl3gspace. 
Read GSR 
Store GSR in BH 
Clear Status Registers ,command 
Set up offset of address. 
Write the command. 
Return to calling routi:ne. 
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PROCEDURE 
erase_all_unlocked_blocks 
This procedure 
erases all the unlocked 
blocks on a 28F016SA. 
params.erase_addr: 
offset of base of device to erase 
Output: 
BX: GSR in both high byte and low byte 
AX, CX, DX: trash 
;=-====================-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-==-=-=-=-=-=-=-=-=-=-=-=-=-- 
erase_all_unlocked_blocks 


push SI 
mov 
EDI,params.erase_addr 
mov 
ES:[EDI],7171H 
inc 
EDI 


; BSR is 1 word above base of target 64K block in ESR space. 


Save old SI. 
Set up offset of address. 
Read ESR command 


mov 
AX,ES:[EDI] 
Read BSR 
test AX,8 
jne 
short q_ful15 


; Poll BSR while BSR.3 of target address is I, meaning queue full • 


mov 
ES:[EDI],A7A7H 
mov 
ES:[EDI],DODOH 
mov 
ES:[EDI],7171H 
inc 
EDI 
; GSR is 2 words above 


Full-chip Erase command 
Confirm command 
Read ESR command 


WSM_not_ready3: 
mov 
AX,ES:[EDI] 
Read GSR 
test AX,80H 
jz 
short WSM_not_ready3 


;loop until GSR.7 indicates WSM is ready 


mov 
AX,ES:[EDI] 
test AX,20H 
jz 
short chip_erase_success 


; If GSR.5 = 
; go through 
xor 
SI,SI 
look_for_bad_erase: 
; Looking at each BSR.5 for operation 
mov 
ES:[EDI],next_block_base 
inc 
EDI 
mov 
AX,ES: [EDI] 
test AX,20H 
jz 
short ok_erased 


I, meaning that the operation was unsuccessful, 
blocks, looking for the ones which EDI didn't erase. 


; Clear SI. 


BSR is 1 word above base of block. 
Read BSR 


inc 
cmp 
jl 
mov 
mov 
mov 
pop 
ret 
erase_all_unlocked_blocks 


SI 
SI,20H 
short look_for_bad_erase 
EDI,params.erase_addr 
BX,ES: [EDI] 
ES:[EDI],5050H 
SI 


Set up offset of device base. 
Read GSR for return 
Clear Status Registers 
command 


Retrieve 
old 51. 
Return to calling routine. 


• 
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PROCEDURE 
lock_block 
This procedure 
locks a block on the 28F016SA. 
Param fields needed: 
params.lock_addr: 
offset of base of 28F016SA block to lock 
Output: 
BX: GSR in high byte and BSR1in low byte 


AX, DX: trash 


mov 
mov 
inc 
inc 


q_unavailable: 
read 
test 
jne 
; Poll 


EDI,params.lock_addr 
ES: [EDI],7171H 
EDI 
EDI 


Set up offset of addl~ess. 
Read ESR command 


AX,8 
short q_unavailable 
GSR while GSR.3 = 1, indicating queue unavailable. 


set_pin 
56,1 


set-pin 
15,1 


; Wait for ramp if necessary. 
mov 
ES:[EDI],7777H 


mov 
ES:[EDI],DODOH 


mov 
ES:[EDI],7171H 


WSM_busy: 
mov 
test 
jz 
; Poll 


mov 
; Look 
dec 
mov 
mov 
mov 
ret 
lock_block 


EDIsable write protection. 
Enable Vpp 


Lock Block command 
Confirmation 
command 
Read ESR command 


AX,ES:[EDI] 
Read GSR 


AX,80H 
short WSM_busy 


GSR while GSR.7 = 0, indicating WSM_busy. 


BH,AH 
; Store GSR 


at BSR.6 to see if block successfully locked. 
EDI 
AX,ES: [EDI] 
BL,AL 
ES:[EDI],5050H 


Read BSR 
Store BSR 
Clear Status Registel's command 
Return to calling rOlltine. 


PROCEDURE 
status_upload 
This procedure uploads status intormation into the ESR trom non-volatile 
status bits. 
Param tields needed: 
params.lock_addr: 'ottset ot 28F016SA device 
Output: 
BX: GSR in high byte and BSR in low byte 
AX, CX, DX: trash 


status_upload 
mov 
mov 
inc 
inc 


proc 
near 
EDI,params.lock_addr 
ES: [EDI],7171H 
EDI 
EDI 


Read ESR command. 
Move EDI up to GSR. 


q_unavailable2: 
mov 
AX,ES:[EDI] 
Read GSR 
test AX,8 
jne 
short q_unavailable2 
; Poll GSR while GSR.3 = 1, indicating queue unavailable • 


mov 
ES:[EDI],9797H 
mov 
ES:[EDI],DODOH 
mov 
ES:[EDI],7l71H 


Lock-status Upload command 
Contirmation command 
Read ESR command 


mov 
AX,ES:[EDI] 
test AX,80H 
jz 
short WSM_busy2 
; Poll GSR while GSR.7 = 
mov 
BH,ES:[EDI] 
dec 
EDI 
mov 
BL,ES:[EDI] 
mov 
ES:[EDI],5050H 
ret 
status_upload 
endp 


0, indicating WSM_busy 
Read GSR 


Read and store BSR 
Clear Status Registers command 
Return to calling routine. • 


PROCEDURE 
pagebuffer_write_to_flash 


This procedure writes from page buffer to flash. 
Param fields needed: 


params.write_base: 
offset of base of 28F016SA blocltto write 
params.pagebuffer_word_count: 
number of words to w:rite to flash 


params.write_addr: offset of 28F016SA address to w:rite 
Output: 
BX: GSR in high byte and BSR in low byte of BX 


AX, CX, DX: trash 


push S1 
; Save old S1. 
mov 
S1,params.pagebuffer_word_count 
; Use S1 to Clluntwords. 
Address 
is where in 28F016SA flash array to begin write. The lowllst 
byte of this must be identical to the start address in the page buffer. 
Low byte of byte_count must be 256 or fewer, high must be O. 
High byte exists for future Page Buffer expandability. 


mov 
ED1,params.write_base 
; Offset of block base address. 
mov 
ES:[ED1],7171H 
; Read ESR command 
inc 
ED1 


;BSR is 1 word above base of target 64K block in status reg space. 


mov 
AX,ES:[ED1] 
Read BSR 


test AX,8 
jne 
short q_ful13 


; Loop while BSR.3 of target address is 1, meaning queuo full. 


mov 
ES:[ED1],OCOCH 


mov 
ES:[ED1],S1 


;Only AO valid here; 
mov 
ES:[ED1],S1 


;AO internally complemented; 
mov 
ES:[ED1],7171H 


; Page Buffer Writo command 
; Write count 
low or high byte loaded depending on AO. 


alternate byte loads; writo starts. 


Read ESR command 


wait_BSR73: 
mov 
AX,ES:[ED1] 
Read BSR 


test AX,80H 
jz 
short wait_BSR73 


;Loop while BSR.7 of target address is 0, meaning block busy. 


mov 
ED1,params.write_base 


inc 
ED1 


;BSR is 1 word above base of target 64K block in status reg space. 


mov 
mov 
mov 
mov 
pop 
mov 
dec 
mov 
mov 
ret 
pagebuffer_write_to_flash 


AX,ES: [ED1] 
AX,5050H 
ED1,params.write_addr 
ES: [ED1],AX 
S1 
BH,ES:[ED1] 
ED1 
BL,ES: [ED1] 
ES:[ED1],5050H 


Read 
Clear Status RegJ.sters command 
Set up offset of address. 
Write 
Retrieve old SIt 
Read GSR 


Read and store BSR 
Clear Status RegJ.sters command 
Return to calling routine. 
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PROCEDURE 
sequential_pagebuffer_load 
This procedure loads the page buffer. 
Param fields needed: 


params.write_addr: offset of origin of device 
params.data_addr: pointer to data to be written to pg buffer 
params.pagebuffer_word_count: number of words to write to pg 


buffer 


params.pagebuffer_start_addr: 
starting pb address of da~a to 


write 
Output: 
AX, BX, DX: trash 


Set aside room for counter. 
Clear high byte of counter 
word. 


push S1 
Save old S1. 


mov 
S1,params.pagebuffer_word_count 
Put # of words to write in S1. 
; SP+6 must be 128 or fewer, SP+7 must be O. 
; High byte exists for future Page Buffer expandability. 
mov 
ED1,params.write_addr 
Set up offset of device 


; address. 
; Read ESR command 
do not need to be written to any 


sub 
mov 
SP,2 
byte ptr[BP-1J,O 


mov 
ES:[ED1J,7171H 
Commands to control entire 28F016SA 
particular address. 
inc 
ED1 
inc 
ED1 


wait_for_pb2: 
mov 
AX,ES:[ED1J 
Read GSR 


test AX,4 
jz 
short wait_for_pb2 


; Poll GSR until GSR.2 indicates that a page buffer is available. 


mov 
ES:[ED1J,EOEOH 
Sequential Page Buffer Load 
cmd. 


; Loads high or low byte of count register, depending on AO. 
mov 
ES:[ED1J,S1 
Write 


; Automatically loads alternate byte of count register. 
mov 
ES:[ED1J,S1 
Write 


Loop through data, writing to page buffer. 


mov 
byte ptr[BP-1J,O 


jmp 
short compare 


mov 
AL,params.pagebuffer_start_addr 


cbw 
add 
AX,DX 
cwd 
mov 
BP+12,DX 


Get starting address in pb. 
Convert it to a word. 
Add to get abs. address in pb. 
Convert AX to a double word. 
Store segment of pb address 
(0) • 


mov 
AX,word ptr[BP-2] 
mov 
EBX,params.data_addr 
add 
EBX,AX 


mov 
ES,word ptr[BX] 


Get current value of counter. 
Get address of ~,here data is. 
Add value of counter to it. 
Put data at that address on 
stack. 
Set up offset of address. 
Write 
Increment countElr. 


mov 
EDI,params.write_base 


mov 
ES:[EDI],AX 
inc 
word ptr[BP-2] 


mov 
AX,word ptr[BP-2] 
cmp 
AX,SI. 


jl 
short not_done 


Get current value of counter. 
Compare to final.value. 


End of loop. 


pop 
mov 
ret 


SI 
SP,BP 
Retrieve old SI. 
Retrieve 
old SP. 
Return to calling routine. 


PROCEDURE 
single_pagebuffer_load 
This procedure loads a single byte or word to a page buffer. 
Param fields needed: 
params.write_base: offset of base of device 
params.data: data to be written to page buffer 
params.pagebuffer_start_addr: byte giving pb location to write 


Output: 
AX: trash 


mov 
ES:[EDI],7l71H 


inc 
EDI 
inc 
EDI 


wait_for_pb: 


mov 
AX,ES:[EDI] 
Read GSR 
test AX,4 
jz 
short wait_for_pb 


; Poll GSR until GSR.2 indicates that a page buffer is available 


mov 
ES:[EDI],7474H 


; Actual write to page buffer. 
add 
EDI,params.pagebuffer_start_addr 


mov 
ES:[EDI],params.data 


; BP+4 is location in pb to write. 
ret 
single_pagebuffer_load 
endp 


PROCEDURE 
two_byte_write 
This routine is used when BYTE# is low, i.e. the 28F016SA 
is in byte mode, to emulate a word write. 
Param fields needed: 
(assume existence of byte fields data_high and 
data low) 


params.write_base: 
offset of base of 28F016SA block to write 
params.data_high: high data byte to write 
params.data_low: low data byte to write 
params.write_addr: 
offset of 28F016SA address to write 
Output: 
BX: GSR in high byte and BSR in low byte 


AX, CX, DX: trash 


mov 
EDI,params.write_base 


mov 
ES:[EDI],7171H 


inc 
EDI 
; BSR is 1 word above base of target 64K block in ESR space. 


Set up offset of address. 
Read ESR command 


mov 
AX,ES:[EDI] 
Read BSR 


test AX,8 
jne 
short q_ful12 


; Loop while BSR.3 of target address is 1, meaning queullfull. 


mov 
ES:[EDI],FBFBH 


; Write low byte of data word 
mov 
EDI,params.write_addr 


mov 
ES:[EDI],params.data_high 


mov 
ES:[EDI],params.data_low 


28F016SA automatically loads alternate byte of data register and 
initiates write. Now we check for successful completion. 


mov 
ES:[EDI],7171H 
; Read ESR command 


mov 
EDI,params.write_base 


inc 
EDI 
BSR is 1 word above base of target 64K block in ESR space. 


waiLBSR72: 
mov 
AX,ES:[EDI] 
Read BSR 


test AX,80H 
jz 
short wait_BSR72 


; Poll BSR while BSR.7 of target address is 0, meaning tlock busy. 


mov 
inc 
mov 
mov 
ret 
two_byte_write 


BH,ES:[EDI] 
EDI 
BL,ES:[EDI] 
ES:[EDI],5050H 
Read and store GSR 
Clear Status Registers command 
Return to calling routine. 
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PROCEDURE 
write_during_erase 
This procedure writes to one block while another is erasing. 
Param fields needed: 
params.data: data word to write to 28F016SA 
params.erase_addr: 
offset of 28F016SA address to erase 
params.write_addr: 
offset of 28F016SA address to write 
Output: 
BX: GSR in high byte and BSR in low byte 
AX, DX: trash 


Set up offset of address. 
Read ESR command 
mov 
EDI,params.erase_addr 
mov 
ES:[EDIJ,7171H 
inc 
EDI 
; BSR is 1 word above base of target 64K block in ESR space. 


mov 
AX,ES:[EDI) 
; Read BSR 
test AX,8 
jne 
short q_ful16 
; Loop while BSR.3 of target address is 1, meaning queue full• 


mov 
ES:[EDIJ,2020H 
mov 
ES:[EDIJ,DODOH 
mov 
EDI,params.write_addr 
mov 
ES:[EDIJ,4040H 
mov 
ES:[EDIJ,params.data 


Write Erase Block command 
Erase Confirm command 
Set up offset of address. 
Write Word command 
Write actual data 


mov 
EDI,params.erase_addr 
mov 
ES:[EDIJ,7171H 
inc 
EDI 
; BSR is 1 word above base of target 64K block in ESR space. 
wait-BSR76: 
read 
test AX,80H 
jz 
short wait_BSR76 
; Loop while BSR.7 of target address is 0, meaning block busy. 


Set up offset of address. 
Read ESR command 


EDI,params.erase_addr 
BH,ES:[EDI) 
EDI 
BL,ES: [EDI) 
ES: [EDI),5050H 


Set up offset of address. 
Read BSR 
mov 
mov 
inc 
mov 
mov 
ret 
write_during_erase 
TEXT 
ends 


Read and store GSR 
Clear Status Registers 
command 
Return to calling routine. 


• 
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CSR: Compatible Status Register. The CSR reflects the status of the entire device and is identical in format to the 
Status Register of the 28FOO8SA. 
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advantage of special 28FOl6SA features, such as low 
power operation, data security, and flexibility of use. 


This application note describes in detail the new 
features of the 28FOl6SA and the benefits of these 
features to the system designer and system end-user. 
Readers wishing technical specifications are referred to 
the 28FOl6SA data 
sheet; readers wishing 
usage 


guidelines are referred to the 28FOl6SA User's Manual. 


The Intel family of flash memory components has a 
new 
member: 
the 
28FOI6SA 
l6-Mbit 
Flashfile™ 


memory. 
The 
28FOl6SA 
provides 
superior 
write 


performance and ultra high density, making possible 
faster, smaller form-factor flash memory sub-systems 
than ever before. Flash memory cards and flash drives 
will reach higher levels of performance with the 
28FOl6SA, while new applications will arise to take 


The following table summarizes the enhanced features 
and advantages of the 28F016SA: 


a 
e . 
ea ure vs. 
a ue 
ummary 


Feature 
of 28F016SA 
Advantage 
to System 
Designer 
Advantage 
to End-User 


FASTER 
WRITES, 
• Wider 
range of applications 
• Faster write to flash cards, 
APPROACHING 
HARD 
• Faster installation 
of embedded 
flash drives 


DISK WRITE 
code 
• Faster formatting 
of cards, 
PERFORMANCE 
• Quicker 
code update in the field 
drives 
over a modem 
line 


HIGHER 
DENSITY, 
• New products 
possible 
• Smaller 
systems, 
lower 
ENABLING 
HIGH 
• Increased 
data acquisition 
capacity 
weight, 
lower power 
CAPACITY 
SOLID 
STATE 
• Higher capacity 
cards, drives, 
consumption 


MASS STORAGE 
Resident 
Flash Arrays 
(RFA) 
• More room for user data on 


• Fewer parts = better 
flash cards & RFAs 


manufacturability 
and reliability 


LOW POWER 
• Optimized 
system 
power budget 
• Longer 
battery life 


CONSUMPTION 
• Smaller 
batteries 


• Less weight 


CODE/DATA 
• Opportunity 
to ship device drivers 
• User is safe from accidental 


PROTECTION 
and application 
code bundled 
with 
modification 
of OS or 


cards, 
RFAs and embedded 
systems 
application 
code 


• Data file security 


FLEXIBLE 
SYSTEM 
• More compact 
systems 
• 28F016SA-based 
cards can 


INTERFACE 
• Optimal 
bus loading 
be used to transfer 
data 


• More detailed 
status information 
between 
3.3V portable 
and 


5.0V desktop 
PCs 


APS: 
Automatic 
Power 
Savings 
feature 
of 


28FOI6SA. 


CSR: Compatible Status Register. The CSR reflects 
the status of the entire device and is identical in 
format to the Status Register of the 28FOO8SA. 


ESR: Extended Status Registers. The GSR and 
BSRs. 


GSR: Global Storage Register. The GSR provides 
additional information about entire device status. 


BSR: Block Status Register. Each BSR reflects the 
status of its 64 KB block. 


CEo#: Chip Enable O.CEo# and CEl# both need to 
be asserted to activate the 28FOl6SA. 


CUI: Command User Interface. Interface between 
the 
microprocessor 
and 
the 
internal 
memory 


operation. 


FFS: Flash File System. Software providing file 
structure and maintenance for mass storage with 
flash. 


RFA: 
Resident 
Flash 
Array. 
Array 
of 
flash 


components permanently resident on a motherboard. 


RP#: Reset Power-Down pin. Master enable switch 
for the 28F016SA. 
Formerly called PWD# on 


28FOO8SA. 


RYfBY#: Configurable 
ReadyfBusy pin, 
giving 


status of pending operations. 


WP#: Write Protect pin. Can be used to override 
block lock status bit in BSRs. 


WSM: Write State Machine. On-board "processor" 
automating Write, Erase, Lock and other functions. 


2.0 INNOVATIVE 
ARCHITECTURAL 


ENHANCEMENTS 


While 
the 
28FOl6SA 
is 
compatible 
with 
the 
28FOO8SA, the 
28FOI6SA 
includes 
hardware 


enhancements 
which provide 
the basis 
for the 


features described in the following sections of this 
document. 


• An improved Command User Interface 
• Two Page Buffers 
• Queue Registers 
• Extended Status Registers 
• Several new pins, implementing new functions. 


The 
Command 
User 
Interface 
(CUI) 
of 
the 


28FOl6SA understands 17 new commands which 
simplify usage or provide access to entirely new 
functions. The CUI is, however..still accessed in the 
same manner as with the 28FO08SA and all of the 
28FOO8SAcommands are valid for the 28F016SA. 


Two page buffers of 256 bytes o:achgreatly increase 
the effective write speed. The page buffers are 
written at SRAM speeds. Writes from full page 
buffers to the flash array can be initiated with a 
single command and will complete independently, 
freeing the CPU for other tasks. 


The Queue Registers can accept up to two (2) 
additional commands while the current command is 
executing. 
This 
allows 
a 
!:hort 
sequence 
of 


commands 
to be 
issued quickly, 
regardless 
of 


whether the internal Write State Machine (WSM) is 
actually ready to process a command. The WSM will 
automatically fetch the next command from the 
queue when it is ready. 


The Extended Status Registers provide more detailed 
information about the state of the 28F016SA, such 
as the state of the queue and which page buffer is 
selected. A Global Status Register and a set of thirty- 
two (32) Block Status Registers give the system 
designer the ability to use each 64-Kbyte block as an 
independent memory. 


• 
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3.0 ENHANCED 
WRITE 
CAPABILITY 


The write performance of the 28FOl6SA is far 
superior to that of previous flash components. For a 
direct write to flash, the 28FOl6SA has a 6 IIs 
average word write time, a 33% improvement over 
the 28FOO8SA.Much more significant, however are 
the on-board page buffers and Auto Erase Suspend 
capability, which boost write performance much 
more by reducing system overhead. 


The 28FOl6SA incorporates two page buffers of 256 
bytes each. The page buffers can be written with 
SRAM-like timings and will program the flash array 
without 
any 
CPU 
overhead, 
providing 
greatly 


increased write efficiencies for both short and long 
writes. 


For example, the 28FOO8SAwrites a byte typically 
in 9.2 IIslbyte, giving a device pair an effective byte 
write speed of 4.6 
liS 
since 9.2 
liS 
per byte/2 


devices=4.6 liS per byte/device. 


The 28FOl6SA, however, can write a word typically 
in 3.8 liS from page buffer to flash memory, giving a 
device pair an effective byte write speed of 0.95 liS 
since 3.8 
liS 
per word/2 devices = 1.9 
liS 
per 


word/device = 0.95 liS per byte/device. 


This feature improves system write performance by 
up to 4.8 times over previous flash memory devices. 
When interfacing 
four (4) 
l6-Mbit 
devices 
in 


parallel in a 32-bit system, the sustained write speed 
approaches 2 MByteslsec. 


EffectiveByte 
WriteSpeed 


WriteSpeed 


For relatively short writes (less than 512 bytes), the 
CPU is free after the page buffers are loaded and the 
command to write to flash is issued. The 28F016SA 
will take care of completing the Page Buffer Write to 
Rash 
Operation. 
This 
limited form of parallel 


processing allows the host system to treat flash 
almost exactly as it would treat SRAM for short 
writes. For writes of less than four (4) bytes, 
however, it is not efficient to use the page buffers 
because the queue can hold three (3) simple Write 
commands. 


For writes of more than 512 bytes, the two page 
buffers can be used to even greater advantage. The 
system can fill one buffer, issue the Write command, 
and then immediately begin to fill the other buffer, 
continuing to alternate in this way until the entire 
write is complete. This sort of large block writing, 
known as "interleaved page mode write," is efficient 


laqtfer A t-... 


AashArmy 


because the overhead needed to set up a write from 
the buffers to flash is incurred ollly once. Also note 
that the write from the buffers to flash is itself faster 
than a write directly from the ~;ystemto the flash 
array. 


The load on the CPU is also dramatically reduced 
using page mode writes. While a write without the 
page buffer requires one setup command for every 
byte or word written, only 6 commands total need to 
be issued to set up the write of 256 bytes to a page 
buffer and from the page buffer to flash. While the 
actual write speed to the flash array is approximately 
35% faster from the page buffer, there is also the 
benefit of huge reduction in processor overhead, 
with page buffer writes more ~han 40 times (256 
commands vs. 6 commands) less of a burden on the 
CPU. 


operation completes. Consult the 28FOl6SA User's 
Manual 


While the 28FOO8SA requires an operation 
to 


complete 
before 
the 
next 
operation 
could 
be 
requested, the 28FOl6SA allows queuing of up to 
two (2) additional operations while the memory 
executes the current operation. As a general rule, the 
28FOI6SA has a 3-deep command queue. This 
eliminates system overhead when writing several 
bytes in a row to the array or erasing several blocks 
at the same time. A subset of the command-set can 
be queued, while the rest of the commands are 
executed immediately. 


Within 
the 
28FOI6SA 
command 
queue, 
Write 


commands 
have 
higher 
priority 
than 
Erase 


commands and are executed by the WSM first, 
regardless of the command order. This feature helps 
insure that valuable data can be captured as it arrives 
in real time. The 28FOl6SA will not, however, put a 
write to a block ahead of an erase to the same block. 


There is, however, an exception to the 3-deep 
command queue rule, which has to do with multiple 
Block Erase commands. 
If Single Block Erase 


commands are the only queued operations, the queue 
then becomes virtually 32-commands deep. This 
allows 
the 
user 
to 
stack 
many 
Block 
Erase 


operations very fast before a Single Block Erase 


In addition, the 28FOl6SA prioritizes multiple Block 
Erase commands when queued in conjunction with 
Write commands. 
The CUI decodes 
the Write 


commands and if those commands affect a block 
which is in the queue for erasing, it will prioritize 
the 
Block 
Erase 
ahead 
of 
other 
Block 
Erase 


operations. This method allows a complete block 
modification to occur as fast as possible. 


Command 
3 


Command 
2 


Command 
1 
,r 


r 
Priority Resolver 
1 
,r 
I 
Write State Machine 
I 


The 
28FOl6SA 
includes 
a 
Compatible 
Status 
Register 
(CSR) 
which 
is 
identical 
to 
the 
status 
register 
on the 28FOO8SA, a Global 
Status 
Register 


(GSR), 
which 
reflects 
the overall 
device status, 
and 
32 Block Status Registers 
(BSRs), 
which are similar 
to the 
GSR 
except 
that 
they 
contain 
information 


specific 
to their 
corresponding 
blocks, 
i.e., 
each 
block has its own BSR. The value of the BSR is that 
it allows 
each 
block 
to operate 
essentially 
as an 
independent 
memory device. 


Since the CPU does not have to control 
and monitor 
the 
details 
of writing 
a word/byte 
and 
erasing 
a 
block, it is free to perform 
higher priority tasks. 


3.5 Automatic 
Erase Suspend to 
Write 


Write 
performance 
is also 
enhanced 
by an 
erase 
suspend 
mode which is automatically 
invoked 
when 
a Write 
command 
to a block 
is issued 
during 
the 
erase of a different 
block. Since the erase of a block 
typically 
takes 
600 
milliseconds 
to 
complete, 
suspending 
an erase to write to a different 
block can 
dr 
. all 
. 


Automatic 
Erase 
Suspend 
to Write 
is important 
to 


Microsoft's 
Flash 
Filing 
System 
(FFS) 
for 
flash 


memory 
cards. 
FFS 
needs 
to perform 
occasional 


background 
erases 
to 
maintain 
efficiency. 
These 


erases 
are much 
less noticeable 
when 
they can be 


suspended 
whenever 
the user de:;ires access 
to the 


flash card. 


3.6 Block Validity and IJata 
Integrity 


If a particular 
block becomes 
co:rrupted because 
of 


an 
interrupted 
Erase 
operation, 
due 
to an 
Abort 


command, 
RP# 
reset 
action 
or the 
power 
supply 


turning 
off, both the Block Operation 
Status 
(BOS) 


and Device Operations 
Status (DOS) bits will be set 


to 
"1," 
indicating 
an 
Inva:lid 
Block. 
This 


combination 
of status 
bit 
setting 
can 
be 
detected 


when normal 
operating 
conditions 
are restored 
and 


after 
issuing 
a 
Status 
Upload 
command, 
which 


updates 
certain 
status bits in the GSR and BSRs. 
If 


this condition 
occurs 
(BOS 
= DOS = I), the user 


must 
re-issue 
a Block 
Erase 
command 
and 
insure 


successful 
erasure 
of 
the 
block 
by 
checking 
the 


appropriate 
GSR and BSR bits. 


amalic 
[Iy mcrease 
write performance. 


1 
2 
3 
4 


Write 


Erase 


Erase in Progress 
Write Issued 
Erase Suspends, 
Era:,e Completes 
Write Takes Place 


28F016SA BLOCKERASE AUTOMATICALLYSUSPENDS IF WRITETO DIFFERENTBLOCKIS ISSUED. 


All 32 blocks of the 28FOl6SA can be erased using 
a single command, the Erase All Unlocked Blocks 
command. When this command and the Confirm 
command are issued, then all of the unlocked blocks 
will be erased in sequence. Locked blocks will be 
skipped and no error code will be returned. The BSR 
Block Operation Status bit can then be checked for 
each block to determine which block failed to 
properly erase and the user can re-issue single Erase 
commands to those particular blocks. This method 
improves overall system write performance in large 
flash memory configurations when extensive data 
cleanup or card formatting are required. 


For Read operations, the 28FOl6SA uses about 50% 
less energy in the 3.3V configuration than in the 
5.0V configuration, making the 28F016SA an ideal 
choice for mobile computing applications as well as 
some power-sensitive embedded applications which 
use the device for infrequently updatable code 
storage. 


For WritelErase operations such as in Resident Flash 
Disk applications, the 28F0l6SA 
in 3.3V mode 
saves 20% / 40% energy respectively, versus the 
5.0V mode. See Table 2 for detailed calculations. 


Table 2. 28F016SA 
Typlcal* 
Power Consumption 
and Energy Coml arison 


3.3V Operation 
Icc(mA) 
Ipp 
(mA) 
Power (mW) 
Energy 
(m.W.sec) 
f=4 
MHz 
ICC x 3.3V + Ipp x Vpp 
Power x Time 


Read Current 
15 
65IJA 
49.7 
0.41 mW.sec/Block 


Write Current 
8 
10 
146.4 
32.38 mW.sec/Block 


Erase Current 
6 
4 
67.8 
54.24 mW.sec/Block 


5.0V Operation 
Icc(mA) 
Ipp(mA) 
Power (mW) 
Energy 
(mW.sec) 
f = 10 MHz 
ICC x 5.0V + Ipp x Vpp 
Power x Time 


Read Current 
50 
65IJa 
250 
0.82 mW.sec/Block 


Write Current 
25 
7 
209 
41.09 mW.sec/Block 


Erase Current 
18 
5 
150 
90 mW.sec/Block 


Block Size= 64 KB = 32 KW 
Typical 
word write speeds: 
6 IJsec (5.0V); 6.75 IJsec (3.3V). 
Typical 
block erase speeds: 
600 msec (5.0V); 800 msec (3.3V) 


Manufacturer 
Part 
Input (V) 
Current 
Total 
Est. Cost * 


Number 
Output 
Components 
Needed 


Maxim 
MAX732 
1.8 to 5.0 
30mA 
13 
$4.80 


Linear Technology 
1l09CS8-12 
2.5 to 1l.0 
30mA 
5 
$4.00 


This list is intended for example only, and in no way 
represents 
all 
companies 
that 
produce 
l2.0V 


conversion solutions. Since this industry develops 
many new solutions each year, Intel recommends 
that the designer contact the vendors for their latest 
products. Intel will continue to work with vendors to 
develop 
optimum 
solutions. 
Intel 
Corporation 


assumes no responsibility for circuitry others than 
circuitry embodied in Intel products. 


At present, there are at least two manufacturers of 
3.3V 
to 
l2.0V 
converters. 
Their 
solutions are 


described in Table 3. These solutions are given only 
for reference and may not be suitable for use in 
every 
system. 
Readers 
wishing 
additional 


information on DC to DC converters are referred to 
Intel's AP-357, "Power Supply Solutions for Flash 
Memory." 


In addition to providing dramatically faster writes, 
the page buffers also save power. While the actual 
power saved depends on the size of the write from 
the page buffer, savings are typically 35% of the 
energy it takes to write without the page buffer, 
since page buffer writes are intrinsically about 35% 
faster while current consumption is the same. 


Automatic Power Savings (APS) is a low power 
feature valid during active mode of operation. The 


28FOl6SA incorporates "Power Reduction Control" 
circuitry which allows the device to put itself into a 
low current state when addresses are not switching 
(in 
other 
words, 
accessing 
the 
same 
memory 


location). After data is read from the memory array, 
the Power Reduction Control logic controls the 
device's power consumption by entering APS mode, 
where the typical ICC current is I mA at 5.0V and 
0.8 mA at 3.3V. CPUs with a slowed clock can take 
advantage of this feature which is entirely automatic 
and transparent to the user. 


The deep power-down mode is activated by the RP# 
pin transitioning low, which turns off all device 
circuitry. The only current consumed is diffusion 
leakage, transistor sub-threshold conduction, input 
leakage, 
and 
output 
leakage, 
totaling 
IliA. 


However, all register content!: are lost and the 
current operation terminates upon entering deep 
power-down mode. 


The deep power-down feature, along with the sleep 
command (following section), gives the 28FOl6SA 
the ability to increase power savings dramatically by 
taking advantage of the fact that anyone 
flash 


device is accessed only occai;ionally. When the 
device is not in use, it can be turned off so that 
scarce battery power is consumed only as needed. 
These power-saving functions (:an be implemented 
in ways entirely transparent to the end-user. The 
only change the user will notice is that batteries last 
much longer with a 28F0l6SA-based system. 
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The Sleep command is new with the 28FOI6SA. 
Unlike deep power-down mode, during sleep mode, 
the status registers, page buffers, and signature 10 
codes can still be read. Once in sleep mode and with 
applied CMOS input levels, the power of the device 
is reduced to deep power-down current levels. The 
Sleep command allows the device to complete any 
current or pending commands before going into 
sleep mode. The Device Sleep Status (DSS) bit in 
the GSR will indicate that the device is in sleep 
mode. Writing the Read Array command wakes up 
the device out of sleep mode. 


With CEO# or CEI# high, the memory will be in 
standby mode. This mode turns off much of the 
device's 
circuitry 
and 
reduces 
device 
power 


consumption. The outputs are in a high-impedance 
state independent of the state of OE# pin. If the 
WSM is executing a command when the device is 
disabled, 
the operation is allowed to continue. 


During this time the power consumption remains at 
the non-standby level until the operation completes. 
The output buffers and most of the input buffers on 
the chip are disabled during standby mode. 


5.0 
DENSITY 
IMPROVEMENTI 
SPACE SAVINGS 


The 28FOl6SA is twice as dense as the 28FOO8SA, 
allowing smaller systems, lower weight, and lower 
power consumption than ever before~rucial 
selling 
points in the highly competitive mobile PC market. 


Flash densities are now on a par with DRAM 
densities, an important step toward the use of flash 
as non-volatile executable memory (Resident Flash 
Array), which provides "instant on" boot capability 
and instant access to applications and data stored in 
flash. RFAs also reduce the amount of necessary 
system DRAM. 


In the removable storage market, the density of the 
28FOl6SA will make conversion to flash the most 
attractive option when considered along with the 
properties which set flash apart from other storage 
media, 
such 
as 
non-volatility, 
low 
power 
consumption, and ruggedness. Flash-based data and 
code storage media such as PCMCIA memory cards 
are already on the shelf, along with PCMCIA-ATA 
flash drives. PCMCIA cards in particular will open 
new distribution channels for software since cards 
based 
on 
the 
28FOl6SA 
now 
have 
sufficient 


capacity for most large commercial programs. While 
3 


cost/megabyte is not yet competitive with magnetic 
media, the XIP or "eXecute In Place" ability of flash 
cards provides software distributors and end-users 
with a compelling reason to consider flash cards. 


The density of the 28FOl6SA is also driving entirely 
new 
applications, 
such 
as 
solid-state 
digital 
photography and audio recording, which require 
memory 
capacities 
which 
were 
not 
previously 


economical in flash. 


The point to remember is that two (2) megabytes of 
70 ns randomly accessible code or data can now be 
stored in a rewritable nonvolatile medium of less 
than 
three 
(3) 
square 
centimeters-a 
30% 


improvement over the 28F008SA. 
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16 Megabitsof Flash Memory· 2 Ways 


28F016SA 
DENSITY 
ENABLES 
SMALLER 
FLASH 
APPLICATIONS, 
EASIER 
MANUFACTURING 


AND GREATER 
RELlABLITY. 


The 28F016SA 
implements 
a dual 
chip-enable 


function with two input pins, CEO# and CE1#, 
whIch together have exactly the same functionality 
as the regular chip-enable pin on the 28F008SA. The 
28F016SA uses the logical combination of these two 
signals to enable or disable the entire chip. Both 
CEo# and CE1# must be active to enable the device. 
If either one becomes inactive, the chip will be 
disabled. This feature allows the system designer to 
reduce the number of decoding pins used in a large 
array of l6-Mbit devices. For square arrays, it can be 
seen that the number of lines needed to control nXn 
chips is 2 times n. For example, in a square array of 
sixteen 28FOI6SAs, only 8 lines are needed instead 


of 16 (see Figure 7). For larger me:moryarrays, the 
reduction in decoding signals increases significantly. 


The portable PC market demands that components 
be able to operate at 3.3Y. On the other hand, most 
desktop systems operate at 5.0Y. The 28FOl6SA 
resolves this conflict with a dual operating voltage 
capability. A 3/5# input pin makes it possible to use 
the 28FOl6SA in both 3.3Y and 5.0Y systems 
interchangeably. The 3/5# 
signal pin 
from the 


system informs the device about tbe supply voltage 
being 
used. 
This 
information 
is 
used 
by 
the 


28F016SA to optimize itself for Ithe input supply 
voltage. Data written using one su;pplyvoltage will 
always be valid using the other supply voltage. A 
28F016SA-based flash memory card is thus able to 
transfer data from a 3.3Y notebook or handheld PC 
to a 5.0Y desktop PC. 
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Dual chip selects reduce the total number of select lines needed. 


Figure 7. 
Dual Chip Selects 
In a Bank Configuration 


6.3 
User-Selectable 
x16/x8 Bus 
Width 


Note that the smallest block granularity is obtained 
with the 28FOl6SA in l6-bit mod~ in a xl6 system. 
The 
most 
efficient 
and 
smallest 
memory 


configuration is obtained with the 28FOl6SA in xl6 
mode in a 32-bit system. 
While the 28FOO8SA'sinterface to the system bus is 
strictly x8, the 28F016SA's BYTE# pin allows either 
a x8 or xl6 bus interface. The system designer now 
has 
a 
choice 
between 
three 
(3) 
different 
configurations in both l6-Bit and 32-Bit systems, 
allowing 
optimization 
of 
the 
effective 
block 
granularity, the space required, and the minimum 
memory configuration. See Table 4 for details. 


The RY/BY# pin is an open drain output pin to 
allow the designer to Wire-OR multiple RYIBY# 
pins in a large memory array, saving on the number 
of control pins which are dedicated to this function. 
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Table 
4. Con 
laurat 
on 
tons 
System 
Parameter 
28FOO8SA (x8 only) 
28F016SA, x8 
28F016SA, x16 


Size 


16-Bit 
Effective Block Size 
128 KB 
128 KB 
64KB 


System 
Minimum Configuration 
Two Devices:2 MB 
Two devices:4 MB 
One device: 2 MB 


32-Bit 
Effective Block Size 
. 256 KB 
256 KB 
128 KB 
System 
Minimum Configuration 
Four Devices: 
Four devices: 
Two devices: 


4MB 
8MB 
4MB 


OPEN DRAIN RY/BY# REDUCES 
THIS ARRAY'S 
INTERRUPT 
LINES TO JUST ONE. 


Figure 
9. Open 
Drain 
RYIBY# 
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RY/BY# 
Device 0 
--,L. 
.J 


RYIBY# 
Device 1 


Withdevices in Level-Modeoperation, this array's output does not indicate 
exactly when device 0 has finished its operation. 


tR 
-----------U--II-t 


Array RY/BY# 


tR = 250 ns typically 


Withdevices in Pulsed-mode Operation, this array's output does indicate 
exactly when Device 0 has finished its operation. 


tRU--------- 
-II-- 
U..-------U----·---- 


RY/BY# 
Device 1 


6.5 
RY/BY# Configuration 
Modes 
(Level & PUlse~) 


A more accurate indication of the array state is 
obtained when each 
28FOl6SA gives a pulsed 


output signal to the host system when it has finished 
its operation. The host system can then examine the 
Global Status Register of each 28F016SA to find 
which one has become ready and issue a Read 
command, or any non-queueable command, to the 
ready device. In this way, multiple devices can 
operate in parallel without the burden of continuous 
polling to find which ones have finished their 
operations. 


While the Level-Mode operation of the ReadylBusy 
indicator 
pin 
continuously 
reflects 
the 
device 
readiness, this type of signal will actually hinder the 
~rformance 
of an array of 28FOl6SAs if the array 
Itself has only one readylbusy output line. This is 
because the array output will indicate busy when any 
one of its component 28FOl6SAs is busy, obscuring 
transitions to ready by any of the other devices and 
forcing the CPU to continuously poll the flash array 
to find ready devices. 
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The 28FOl6SA incorporates a RYIBY# pin which 
can be configured four ways: 


• Level Mode (Default) 
• Pulse-on-Write Only 
• Pulse-on-Erase Only 
• Disable 


Level 
mode 
is 
the 
default 
mode. 
In 
this 


configuration, the state of the WSM is continuously 
indicated by the RYIBY# pin, which is an open 
drain output pin pulled high through an external 
pull-up resistor when the WSM is ready. This feature 
allows the user to OR-tie RYIBY# pins of multiple 
devices together in flash memory arrays such as 
Resident Flash Array or flash drive applications, 
saving control logic and simplifying board design. 


Pulse-on-write mode will cause RY/BY# 
to pulse 
low at the completion of Page Buffer Write to Flash 
operations 
only. This 
is 
useful 
for controlling 


interleaved page mode writes. 


Pulse-on-erase mode will cause RY/BY# 
to pulse 
low at the completion of Block Erase operations, 
including at the end of each Block Erase during an 
Erase All Unlocked Blocks operation. 


The RYIBY# pin can also be disabled so that it will 
always report a READY condition. Disabling the 
RYIBY# pin has no impact on the status registers. 


While the 28FOO8SAprovides data security through 
the RP# pin (formerly PWD#) and the intrinsic non- 
volatility of flash, it does not have the ability to 
provide selective locking of some blocks while 
leaving others available for writing and erasing. The 
28F016SA, 
however, 
provides 
the 
ability 
to 
selectively lock any 64-Kbyte blOCKto protect 
critical code or data. Each block on the 28FOl6SA 


has 
an 
associated 
non-volatile 
lock-bit 
which 
determines the lock status of that block. 


A WP# (Write Protect) pin activates the block lock- 
bits, preventing any Write or Erase of blocks which 
have their lock-bits set. When the WP# pin is 
asserted (low) and a block's lock-bit is set, the user is 
safe from accidentally damaging or modifying the 
data in that block. 


The greatest benefit 
of 
the 
28F016SA's 
block 
locking feature is that it is possible for OEMs and 
software 
developers 
to 
bundle 
applications 
or 


operating system code in flash memory cards or in 
RFAs, providing 
an entirely 
new 
medium 
for. 
software distribution. Software distributed in this 
way is safe from accidental user overwrites, and yet 
capable of in-system updates to accommodate new 
versions. When 28FOl6SA-bundled code or data 
needs to be updated, raising WP# high provides a 
temporary override of the block locking mechanism 
so that locked blocks on the device may be written 
to. 


The advantage of partitioning a 28F016SA-based 
memory card into locked and unlocked sections is 
that a user can keep an application and the files 
created with that application together. For example, 
a spreadsheet program and all of the spreadsheets a 
user has created with that program can be stored on 
one flash card. Such an arrangement gives the user a 
new kind of portability, one which allows him or her 
to carry all of the work in his or her pocket with 
instant access to the application and files anywhere a 
compatible PC is available. Hence, the data locking 
features of the 28FOl6SA complements its ability to 
act as executable system memory, providing the end- 
user with a solution which provides portability, 
safety, convenience, low power and high speed of 
access which no other medium can claim. 


The 28FOl6SA provides complete protection of 
flash contents through the ResetIPower-down (RP#) 
pin. RP# locks the flash array from spurious writes 
and places the outputs in a high impedance state. If 
asserted during write/erase modes, RP# low aborts 
the current operation in progress, cancels all pending 
WSM commands, flushes the command queue and 
clears the status registers. 


RP# is used both as a power conservation feature 
and as a data protection feature. An example of 
when RP# is useful for data protection is during 
power-up, when other inputs to the 28FOl6SA may 
be in an indeterminate state. Holding RP# low until 
the power supplies reach operating levels and all 
input signals become stable, guarantees maximum 
protection for the device. The use of RP# for power 
conservation is discussed in section 4.4. The reader 


wishing more detail on the use of the RP# pin is 
referred to the 28FOl6SA User's Manual. 


This application note discusses the key features and 
benefits 
of 
the 
revolutionary 
l6-Mbit 
device 


architecture and their impact on system and software 
designs. End-user benefits from these enhanced 
features are brought to light with respect to the wide 
range of new applications enabled by the 28FOl6SA 
chip and 28F016SA-based system products. 
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APPENDIX 
A 
28F016SA 
COMMAND 
L1SITINGS 


Command 
Device Mode 
Codes (Hex) 


OOH 
Invalid/Reserved 
10H 
Word/Byte 
Write 


20H 
Single Block Erase 
28FOO8SA- 
40H 
Word/Byte 
Write 
Compatible 
SOH 
Clear Status Registers 
Commands 
70H 
Read CSR 
90H 
Read 10 Codes 
BOH 
Erase Suspend 
DOH 
Confirm/Resume 
FFH 
Read Flash Array 


OCH 
Paae Buffer Write to Flash 
71H 
Read GSR or BSRs 
72H 
PaQe Buffer Swap 
74H 
Sinale Load to Paae Buffer 
75H 
Read Paae Buffer 
28F016SA 
77H 
Lock Block 
Performance- 
80H 
Abort 
Enhancement 
96H 
RY/BY# 
Reconfiaurations 
Commands 
01H 
RY/BY# 
Enable to Level Mode 
02H 
Pulse-an-Write 
03H 
Pulse-On 
Erase 
04H 
RY/BY# 
Disable 
97H 
Upload Status Bits 
99H 
Upload 
Device Information 
A7H 
Erase All Unlocked 
Blocks 
EOH 
Seauential 
Load to Paae Buffer 
FOH 
Sleep 
FBH 
Two-Bvte 
Write 
• 
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The ETOX III (EPROM tunnel oxide) 28F008SA is a 
high-density product offering from Intel's second gen- 
eration of flash memory devices. This 1,048,576 x 8 
memory with its symmetrical blocking (16 blocks x 
64 Kbytes), 
very high cycling endurance, 
on-chip 
write/erase automation, and erase-suspend/resume 
ca- 
pability can be termed a block-alterable non-volatile 
RAM. In addition to selective block erasure, integrated 
Command User Interface (CUI), Write State Machine 
(WSM), Status Register, and deep power-down capabil- 
ity, the 28F008SA adds a dedicated READY/BUSY 
output (RY/BY /I). This new feature provides immedi- 
ate hardware signaling of byte-writelblock-erase 
com- 
pletion and erase-suspend/resume 
actuation. 


Flash memories combine inherent non-volatility with 
in-system alterability of device contents. Advances in 
process control have allowed development of a double- 
polysilicon single-transistor flash memory capable of 
100,000 write/erase 
cycles per block. The 28F008SA 
electrically erases all bits in a block via electron tunnel- 
ing. The EPROM 
programming 
mechanism of hot- 
electron injection is employed for high-performance 
electrical byte write as required for fIle and data storage 
applications. 


The Command User Interface and Status Register in- 
terface 
to power-up/down 
protection, 
address/data 
latches, and the Write State Machine (which in turn 
controls internal byte write, block erase, cell-margin 
circuits, and the dedicated READY /BUSY status out- 
put). These features augment prior flash memory cir- 
cuitry to optimize Intel's 28F008SA for microproces- 
sor-controlled byte write and block erase. 


Read timing parameters 
are comparable to those of 
CMOS DRAMs, SRAMs, EPROMs, and EEPROMs. 
The 85 ns access time results from a memory cell-cur- 
rent of approximately 70 J.LA,low-resistance polysili- 
cide wordlines strapped with metal, advanced scaled 
periphery transistors, and an optimized data-out buffer. 


The dense one-transistor 
cell structure, coupled with 


high array efficiency, yields a one-megabyte die mea- 
suring 539 by 286 mils. 
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Intel's ETOX III flash memory technology incorpo- 
rates advances from ETOX I and ETOX II processes 
and leverages over two decades of EPROM manufac- 
turing experience. Using advanced 0.8 J.Lmdouble-poly- 
silicon N-welllP-well CMOS technology, the 1,048,576 
x 8-bit flash memory employs a 2.5 J.Lmx 2.9 J.Lmsin- 
gle-transistor cell affording array density equivalent to 
comparable EPROM technology, and twice that of In- 
tel's ETOX II process. The ETOX III flash memory 
cell is identical to EPROM, with an additional source 
implant which optimizes erase pe:rformance. Figure I 
shows a cross-section of the flash memory cell. 


High-quality tunnel oxide under the single floating 
polysilicon gate promotes electriclL!erasure. All cells 
within the selected block are simultaneously erased via 
Fowler-Nordheim 
tunneling. App:Jying 12V to block 


source junctions and grounding the control gates erases 
all cells within that block. The intl:rnal WSM controls 
the automated 
block-erase algorithm, 
including pre- 


erase conditioning (i.e., pre-programming all block bits) 
and margin verification, in response to user requests 
relayed by the CUI. WSM-controlled block erasure, in- 
cluding pre-programming, 
typically requires 1.6 sec- 


onds. 


Byte write is accomplished with the:standard EPROM 
mechanism of channel hot-electron injection from the 
cell drain junction to the floating gate. Bringing both 
the control gate and the cell drain to high voltage initi- 
ates programming. 
The WSM regulates the internal 


byte-write algorithm, including margin verification, af- 
ter the correct command sequence is written and de- 
coded. Byte write typically requir~ 9 J.Ls. 
""""''''1:b "'"""" 
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The 28FOO8SAis a 1,048,576 x 8 memory comprised of 
2048 rows by 8192 columns. Array layout is segmented 
as four quadrants, each 1024 rows by 2048 columns. 
Access time is reduced by limiting column length to 
1024 cells. The polysilicon row is strapped in metal 
every 512 columns to reduce wordline delay. Two row 
decoders run vertically between quadrants, and column 
decoders run horizontally between quadrants. Figure 2 
shows block placement and array organization. A die 
photo of the chip is shown in Figure 30. 


Each quadrant is subdivided into four 64-Kbyte blocks. 
Each block source is electrically isolated from the 
source of other blocks. This allows individual block 
erase without altering data in the remaining 15 blocks. 


Each block is further subdivided into eight Input/Out- 
puts. Data for 1/00 is stored in the left-most 64 col- 
umns, with the next 64 storing data for 1/01> etc. 


Rows in the upper quadrants are numbered 0-1023 
from top to bottom; lower quadrant 
rows similarly 
1024-2047. 


BLOCK 0 
BLOCK 
1 
BLOCK 2 
BLOCK 3 


00000- 
10000- 
20000- 
30000- 
OFFFF 
lFFFF 
2FFFF 
3FFFF 


BLOCK 8 
BLOCK 9 
BLOCK 
10 
BLOCK 
11 


80000- 
90000- 
AOOOO- 
BOOOO- 


8FFFF 
9FFFF 
AFFFF 
BFFFF 


Addresses A9-Ao select one of 1024 rows. while A19 
selects upper or lower decoder. Row address lines are 
decoded sequentially for selection. Row address bit- 
maps are listed in Table 3. 


Columns are numbered 0-8191 from left to right, top 
to bottom. Addresses A19-A16 select one of 16 blocks, 
while A1S-AIO select eight of the 512 columns within 
that block. These ten address lines are also decoded 
sequentially to access all 8192 columns. Block address 
bitmaps are listed in Table 4; column address bitmaps 
are listed in Table 5. 


Intel's 28FOO8SAcontains an on-chip Command User 
Interface, Write State Machine, Status Register, and 
address/data 
latches to dramatically simplify user in- 


terface. This combination of functional units reduces 
microprocessor control complexity of byte-write, block- 
erase, 
erase-suspend/resume, 
Status 
Register 
read/ 
• 
clear, ID read, and array read operations. Figure 3 
shows the 28FOO8SAblock diagram. 


BLOCK ~ 
BLOCK 5 
BLOCK 6 
BLOCK 7 


~OOOO- 
50000- 
60000- 
70000- 


~FFFF 
5FFFF 
6FFFF 
7FFFF 


BLOCK 
12 
BLOCK 
13 
BLOCK 
14 
BLOCK 
15 


COOOO- 
00000- 
EOOOO- 
FOOOO- 


CFFFF 
DFFFF 
EFFFF 
FFFFF 


The CUI consists of a command decoder and command 
register. User requests are decoded and latched in a 
microprocessor write cycle controlled by Chip Enable 
(CE#) 
and Write 
Enable (WE#). 
Status Register 


read/clear, ID read, and array read commands are di- 
rectly handled by the CUI. The CUI also accepts byte- 
write, 
block-erase, 
and 
erase-suspend/resume 
com- 


mands. WE#'s 
rising edge latches address, command 


and data-in registers, and requests WSM initiation of 
the selected operation. These on-chip address, com- 
mand, and data latches controlled by the CUI minimize 
system interface logic, and free the system bus. 


The WSM processes byte-write, block-erase, and erase- 
suspend/resume 
requests received from the CUI. The 
WSM rejects byte-write and block-erase requests if the 
WSM is currently busy, if Vpp is not at high voltage 
(12V), or if the Low Vpp Status Register flag is set (i.e., 
not cleared from a previous low-voltage condition). 


The WSM consists of an integrated oscillator and con- 
trol circuitry. It generates signals which control the 
byte-write, block-erase, erase-suspend/resume, and ver- 
ify circuits. It also receives feedback from these circuits 
allowing Status Register update. Th(~WSM and associ- 
ated circuits perform the equivalent of first-generation 
flash memory program and bulk-erase algorithms auto- 
matically. This eliminates the need for system timers, 
and frees the microprocessor to service interrupts or 
perform other functions during dl,vice byte-write or 
block-erase operations. 


The WSM provides feedback to the CUI to determine 
when a given command is valid. )Jthough 
nearly all 


commands are available when the WSM is inactive, 
only status read is valid while the WSM performs a 
byte-write operation. During block erase, only the read- 
status 
and 
erase-suspend 
commands 
are 
available. 


Read-array, read-status, and erase-resume commands 
are valid with the WSM in an era:,e-suspended state. 
Invalid operations are interpreted 
as the read-array 


command when the WSM is inactive or erase-suspend- 
ed, and as the read-status command when the WSM is 
active in byte write or block erase. 


The internal Status Register contains a full complement 
of activity status bits. These bits and their meaning 
(I,D) are: 
SR.7: WSM status (READYIBUSy) 
SR.6: Erase-suspend status (ERASE SUSPENDED/ 
ERASE IN PROGRESS OR COMPLETED) 
SR.5: Block-erase status (ERROR/SUCCESS) 
SR.4: Byte-write status (ERROR/SUCCESS) 


SR.3: Vpp status (LOW/OK) 


All bits are set by the WSM, and read via the CUI. The 
WSM can only set SR.3, SR.4, and SR.5; it cannot 
clear them. They remain set until the CUI processes a 
clear Status Register command. There are two reasons 
for operating in this fashion. 


First is synchronization; the WSM does not know when 
the host CPU has read the Status Register, therefore 
does not know when to clear it. 


Secondly, allowing system software to control reset 
adds flexibility to the way this device may be used. The 
CPU may write several bytes or erase several blocks 
back-to-back 
while monitoring RY/BY # 
or polling 


SR.7 to determine when the next byte-write or block- 
erase command can be given. When all bytes are writ- 
ten, or all blocks erased, the system polls the other 
status flags to determine if all operations were success- 
ful or if an error occurred. While other approaches re- 
quire the controlling microprocessor to watch for non- 
completion of write or erase within a specified time to 
indicate an error, this implementation requires no ex- 
ternal system timers or software timing loops. As such, 
the system can reduce its polling overhead while still 
identifying any potential error conditions. 


Status Register contents are driven to device outputs on 
the falling edge of CE# 
or Output Enable (OE#), 
whichever occurs last in the read cycle. CE# or OE# 
must be toggled to update Status Register contents. 


A dedicated output pin, RY/BY #, provides additional 
indication ofWSM activity. This capability allows both 
hardware signal of status and/or 
software polling to 
determine activation, completion, or suspension of in- 
ternal byte-write!block-erase operations. Hardware sig- 
naling minimizes both CPU overhead and system pow- 
er consumption. 


The WSM is designed using clocked logic circuits. An 
on-chip ring oscillator generates the clock signals. The 
frequency of a standard ring oscillator varies with pro- 
cessing, temperature and supply voltage. An improved 
design, used on the 28FOOIBX and 28FOO8SA,mini- 
mizes these variations. 


The switching current of each stage in the ring oscilla- 
tor is controlled by a current reference which varies 
linearly with Vcc. The trip point of each ring oscillator 
inverter also varies linearly with Vcc. These two effects 
offset each other, and the resulting oscillator period is 
proportional to RC with only a small dependence on 


VCC' 


An on-chip resistor sets the value of R. The gate capac- 
itance of the inverters in the ring oscillator sets the 
value of C. Process variations in these values are re- 
duced by trimming the period of each oscillator during 
manufacturing. The resistor is the only source of tem- 
perature variation. 


The LOWVcc 
and LOWVpp 
generation 
circuit 
is 
shown in Figure 4. Power supply voltages (Vcc and 
Vpp) are divided down and compared to a reference 
voltage. IfVREF is greater than the divided power sup- 
ply voltage, the LOWVcc or LOWVpp signal is driven 
high. The generated VREF level is supply-voltage inde- 
pendent to the first order. 


Positive power to the circuit is supplied by Ml and M2. 
M 1 and M2 sources are pulled up to the higher of (Vpp 
- 
Vtn> or (Vcc 
- 
Vtw)' Vtn is the threshold of an 
implanted N-channel device, about 0.9V. Vtw is the 
threshold of a native N-channel device, about OV.This 
scheme ensures that the circuit works regardless of the 
applied supply voltages. 


The LOWVee 
signal is used by the byte-write and 
block-erase circuits, as well as the CUI and WSM. If 
LOWVee is active, the CUI will not accept user writes 
and resets to an array read condition. The WSM is 
similarly reset by LOWVee. 
The LOWVpp signal is 
used by the WSM; if Vpp drops below the high-voltage 
detector trip point during byte write or block erase, the 
Status Register's low Vpp bit is set and WSM operation 
halts. The system must clear the Status Register before 
any subsequent byte-write or block-erase operations 
can succeed. 


The 28FOO8SAincorporates a deep power-down mode 
that reduces Ice 
and Ipp to typically 0.20 JLA and 
0.10 JLA respectively. RP#' 
low selects deep power- 
down mode. When RP #' is high, the device can be 
placed in an active or standby mode depending on 
CE#"s state. 


Deep power-down is similar to standby except that all 
circuits excluding the RP#' buffer are turned off. This 
mode greatly reduces power consumption, but requires 
more time to transition the device into an active mode. 
A read wake-up time (tPHQY) is required from RP#' 
switching high until output and sense circuitry become 
fully functional and data can be read from the part. 
Similarly, a write wake-up time (tpHWL) is needed be- 
fore the CUI recognizes writes. After this interval, nor- 
mal operation is restored; the CUI is reset to read-array 
mode and the Status Register is cleared to 80H. 


A diagram of the power-down circuit is shown in Fig- 
ure 5. The TTL buffer formed by Ml-M3 
disables the 
low-power detect circuits, the redundancy-address flash 
bits, and the CE#' TTL buffer formed by M4-M6. 
In 
previous Intel flash devices, these circuits were always 
enabled. Turn-on 
delays of these circuits determine 
RP#' access time and write specifications. 


RP #' functions properly with TTL-level inputs. How- 
ever, to attain lowest possible power consumption, full 
CMOS levels must be used. If the voltage on the gate of 
M3 rises above its 0.9V threshold M3 will turn on and 
draw current. Input voltages in the 0.7V-0.9V range 


could cause enough subthreshol . conduction in M3 to 
exceed the Ice deep power-down current (IceD) speci- 
fication. This is why RP#"s input voltage is specified as 
GND ±0.2V. 


RP #' also functions as a hardware reset to the WSM 
and CUI. If RP#' is driven active during byte-write, 
block-erase, or erase-suspend opl,ration, that operation 
is aborted leaving the addressed memory locations in an 
unknown state. The Status Register is cleared, and CUI 
is set to array read. The aborted operation (byte write 
or block erase) must be repeated with RP#' inactive to 
obtain a valid condition in the memory array. 


Reset using RP #' should be restricted to system reset 
only (as in the case of power supply failure), and should 
not be used as a software means to terminate byte-write 
or block-erase operations. 


TO THE 
REST 
OF 


THE 
CHIP 
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Block erasure is achieved by a two-step write sequence. 
The erase-setup code is written to the CUI in the first 
cycle. Erase confirm is written in the second cycle. The 
address supplied with the erase-confirm command is 
latched and decoded internally by the 28FOO8SA;erase 
is subsequently enabled in that block. The second 
WE# 
rising edge initiates the operation (WE#- 
controlled write). 


The WSM triggers the high-voltage flash-erase switch 
connecting the 12V supply to the source of all bits in 
the specified block, while all wordlines are grounded. 
Figure 6 shows organization of the block source 
switches. Fowler-Nordheim tunneling results in simul- 
taneous erasure of all bits in the selected block. 


The block source switch controls the source voltage of 
all bits in a particular block. This circuit is shown in 
Figure 7. During block erase, M2 is off and MI pulls 
the source to Vpp. When not in erase, MI is off and M2 


pulls the source to ground. The high-voltage latch 
formed by M4-M7 converts the low-voltage ERASE 
signal to a high-voltage signal that controls Ml. 


The tunneling that occurs during block erase requires 
only a small amount of current. However, the initial 
current required to charge the block's large source ca- 
pacitance to the erase voltage is significant. MI is sized 
to limit this current yet still apply sufficientsource volt- 
age to achieve fast block-erase time. 


The LOWVcc signal protects the array from erasure 
when Vpp is at a high voltage but Vcc is below the 
write/erase lockout voltage (VLKO).When this occurs, 
M3 pulls the block source to ground. The high-voltage 
latch is forced by M8 into the state that turns MI off. 


Vpp is continually monitored during all phases of the 
block-erase operation. If Vpp falls below the trip point 
of its high-voltage detect circuitry, erasure will not oc- 
cur (or halts) and Status Register Vpp status (SR.3), 
block-erase status (SR.5) and WSM status (SR.7) bits 
are set to "I". 


• 


If SR.3 (Low Vpp) is set, WSM operation is inhibited. 
The WSM will not execute further byte-write or block- 
erasure sequences until the Status Register has been 
reset by system software. Byte-write or block-erase re- 
quests with error flags SR.4 or SR.5 set are not inhibit- 
ed, but the system loses the ability to determine success. 
The clear Status Register command resets these bits. 


After receiving the block-erase command sequence, the 
WSM automatically controls block pre-condition (pro- 
gramming all bytes to OOHwithin the chosen block), 
erase pulses and pulse repetition, timeout delays, and 
byte-by-byte verification of all block addresses (sequen- 
tially checked via the address counter) using an alterna- 
tive sensing reference to verify margin. The internal 
erase and verify operations continue until the entire 
block is erased. A read cycle applied to the part follow- 
ing the block-erase command sequence outputs Status 
Register contents; system software can poll the Status 
Register to determine when block erase is complete, 
and if it was successful. Alternately, the system can 
monitor RY/BY # until that output is driven high, and 
then poll the Status Register to determine success. Fol- 
lowing block erasure, the device remains in Status Reg- 
ister read mode; a read-array command must be written 
to the device to access array data. 


If the erase-setup command is followed with a com- 
mand other than erase confirm, the device will not 
erase. The WSM sets both byte-write status and block- 
erase status bits in the Status Register to indicate an 
invalid sequence. 


Erase suspend allows the system to interrupt 
block 


erase to read data from another array block. The ability 
to suspend erase and read data from another block of- 
fers the flexibility required for file system applications. 
Upon receiving the erase-suspend command, the CUI 
requests that the WSM pause at one of several predeter- 
mined points in the algorithm. Upon reaching a sus- 
pend point, the WSM sets SR.6 (erase-suspend status) 
and SR.7 to "1", and drives the RY/BY# 
pin high. 
The system must poll the Status Register to determine 
if the suspend has been processed or the block erase has 
actually completed. Block-erase completion is indicated 
by SR.6 cleared to "0" and SR.7 set to "I". Read bus 
cycles default to Status Register read after issuing the 
erase-suspend command. 
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Once suspended, the WSM asserts a signal to the CUI 
which allows response to the read-array, read-status, 
and erase-resume commands. The system can write the 
read-array 
command allowing read access to blocks 


other than that which is suspended. The WSM contin- 
ues to run idling in a suspended state, regardless of all 
control inputs except RP#. 
RP# 
driven low immedi- 


ately shuts down the WSM, aborting the suspended 
erase operation. 


The erase-resume command must be issued upon com- 
pletion of reads from other array blocks to continue 
block-erase operation. The WSM then clears SR.6 and 
SR.7, drives RY/BY # low, and fe.-sumeserase opera- 
tion from the suspension point. Read cycles following 
the erase-resume 
command 
output 
Status 
Register 


data. 


Byte write follows a flow similar to block erase. The 
byte-write setup command is first written to the CUI. A 
second write cycle loads address and data latches. The 
rising edge of the second WE# pulse requests that the 
WSM initiate activity, applying high voltage to the 
gates and drains of all bits to be written. Unlike block 
erase, byte write will proceed regardless of what data is 
applied on the second CUI write cyde; however, apply- 
ing data FFH does not modify memory contents. 


Like block erase, the WSM controls program pulses 
and pulse repetition, timeout delays and byte verifica- 
tion. Byte write and verify (with alternate sensing refer- 
ence and internally-generated verify voltage) continue 
until the byte is written. 
Internal 
byte-write verify 


checks that all bits written to zero have been correctly 
modified; it does not check bits spclcifiedas one. Byte 
write cannot change existing zero!! to ones; this can 
only be accomplished by erase. 


Read bus cycles following byte write operations output 
Status Register 
data. 
System software, 
polling the 


Status Register, is informed ofstatuii through bits SR.3, 
SR.4, and SR.7. The RY/BY# 
output 
can also be 


monitored 
to determine completion. The read-array 


command must be written to the CUI following byte 
write to access array data. 


In a scenario similar to that described under block era- 
sure, byte write does not occur (or halts) if Vpp is de- 
tected low. In such a case SR.3, SR.4, and SR.7 are set 
high, and no further writes can take place until the 
Status Register is cleared by the clear Status Register 
command. 


Figures 9 through 24 show graphs of several device 
parameters as a function of temperature 
and supply 


voltage. The graphs illustrate that the 28F008SA has 
significant margin to data sheet specifications. 


In particular, note Figure 9 which shows typical read 
performance tAYQY(tAee) of the 28F008SA as a func- 
tion of Vee and ambient temperature. tELQY(teE> in 
Figure 10 and tGLQY (toE> in Figure II are also of 
particular 
interest. Access times tAYQY, tELQY, and 


toLQY are specified and tested with an output load of 
100pF; additional output load capacitance slows device 
operation. 


Table I shows typical supply currents at room tempera- 
ture for several operating modes. 


Ice 
Ipp 
Mode 
(Vee = 5.0V, 
CMOS Inputs) 
(Vpp = 12V) 


Read 
20mA 
100 }.loA 


Byte Write 
10mA 
12mA 


Block Erase 
10mA 
12mA 


Standby 
40lJoA 
100 IJoA 


Deep Power-Down 
0.20 IJoA 
0.07 IJoA 


The system designer is primarily concerned with power 
consumption during block erase and byte write. Typical 
curves for Ice and Ipp during block erase are shown in 
Figure 25. Ice and Ipp for byte write are illustrated in 
Figure 26. 


The 28F008SA ad~ances byte-write and block-erase 
performance compared to previous flash memories. The 
on-chip algorithm is improved over the 28FOOIBX to 
take advantage of process enhancements. This improve- 
ment is most apparent when compared to first-genera- 
tion flash parts with externally controlled algorithms. 
First-generation device times shown in Table 2 assume 
optimal system overhead, and as such are absolute best 
case. 


Table 
2. Byte-Write 
and Block-Erase 
Performance 
vs Previous 
Devices 


Device 
Byte-Write 
Block-Erase 
Erase Time 


Time 
Timel 
# Bytes 
per Kbyte 


Second-Generation 
Flash Memory 
Devices(1) 


28F008SA 
9 IJos 
1.5s/64K 
23ms 


28F001BX 
18 IJos. 
3.8s/112K 
34ms 


2.1s/8K 
256 ms 


2.1s/4K 
513 ms 


Flrst·Generatlon 
Flash Memory 
Devices(2) 


28F020 
16.5 IJos 
6.8s/256K 
27 ms 


28F010 
16.5 IJos 
3.9s/128K 
30ms 


28F512 
16.5 IJos 
2.4s/64K 
37 ms 


28F256A 
16.5 IJos 
1.6s/32K 
51 ms 


NOTES: 
1. Typicalmeasured time. 
2. Times calculated based on typical erase and precondi· 
tion pulse requirements,withminimumwritetimings.Calcu- 
lations are described in Figure8. 


Figure 27 shows block-write and block-erase times at 
O"Cand 70°C over cycling. 


One of the most important 
reliability aspects of the 
28F008SA is its capability of 100,000 write/erase cycles 
per block. Destructive oxide breakdown has been a lim- 
iting 
factor 
in 
extended 
cycling 
of 
thin-oxide 


EEPROMs. Intel's ETOX III flash memory technolo- 
gy extends cycling performance through: 
• Improved 
tunnel-oxide 
processing that 
increases 
charge-carrying capability tenfold. 


• Significantly reduced oxide area under stress that 


minimizes probability of oxide defects in the region. 


• Reduced oxide stress due to a lower peak electric 


field (lower erase voltage than EEPROM). 


Reliable byte-writeiblock-erase cycling requires proper 
selection of the maximum erase threshold voltage (V0, 
and maintenance 
of a tight distribution. 
Maximum 
erase Vt is set to 3.4V via the internal block-erase algo- 
rithm and verify circuits. Tight erase Vt distribution 
gives an order of magnitude of erase-time margin to the 
fastest erasing cell, with virtually identical erase Vt dis- 
tributions at 1 and 10,000 cycles (Figure 28). Program 
Vt distribution is similarly consistent over cycling (Fig- 
ure 29). 


ing. First, only one of the two row decoders is active at 
any time (selected by AI9)' Rows in the other two 
quadrants are grounded. Secondly, two separate inter- 
nally-switched voltages supply the left and right quad- 
rants. Only one supply (selected by block address Als) 
is switched to programming voltages while the other 
remains at read voltages. This AI9-AIS 
row decoding 
ensures that during byte write, 12 of the 16 blocks have 
a gate voltage below that required for programming. 


The 28FOO8SA offers protection 
against accidental 
block erasure or byte write during power transitions. 
Internal circuitry creates a device insensitive to Vpp/ 
Vcc supply power-up sequencing. Vpp s VpPL locks 
out byte-write and block-erase circuits. Vcc s VLKO 
disables CUI command writes, resets the CUI to array 
read mode, and holds the WSM inactive. The system 
designer must still guard against spurious command 
writes for Vcc > VLKO when Vpp > VPPL' 


Several strategies are available to prevent data modifi- 
cation in the 28FOO8SA.The CUI provides a degree of 
software write protection since memory alteration oc- 
curs only after successful completion of a two-step 
write sequence. WE# and CE# must both go active to 
perform this sequence; driving either high inhibits com- 
mand/data 
writes. Secondly, the system can place the 
device in deep power-down mode (RP# 
= VIL> to 
disable command writes, reset the CUI to array read 


wu.", 
.•.Pi" 
LV 
.•.PPH, 
VJ. 
I)WlLf.,;ll 
it. 
LU vA~ 
wJen 


memory updates are required. ~ince byte-write and 
block-erase circuits are disabled by Vpp s VPPL,Vpp 
switching adds another level of data security. 


The 28FOO8SAis the first flash !Lemory with features 
optimized for solid-state systems and fIle storage. These 
features include symmetrical block-erase, automation 
of byte write and block erase, emse suspend for data 
read, a reset/power-down 
mode, a write/erase 
Status 


Register, and a dedicated RY/BY# 
status pin. With 


simple microprocessor interfacing and software com- 
mand sequences, the 28FOO8SAis ':he non-volatile stor- 
age solution of choice for today's designs. 


Related documents of interest to readers of this engi- 
neering report: 


28FOO8SAData Sheet (order #29(429) 


28FOO8SA-LData Sheet (order #290435) 
AP-359 "28FOO8SAHardware Interfacing" 


(order #292094) 
AP-360 "28FOO8SASoftware Drivers" 


(order # 292095) 
AP-364 "28FOO8SAAutomation and Algorithms" 


(order #292099) 
ER-28 
"ETOX III Flash Memory Technology" (or- 
der #294012) 


FORMULA: 
b = # bytes in a block (256K, 128K, 64K, 32K) 
n = 
# of erase pulses required (90 pulses) 


w = time for a write cycle (150 ns, tAVAV) 


v = time to verify (6055 ns, tWHGL + tGLQV) 
p = program pulse width (10 I-ts, tWHWH1) one 


pulse programming assumed 


e = erase pulse width (10 ms, tWHWH2) 


Precondition and precondition verify time is: 


b (2w + P + v) 


Erase/verify, each loop where some byte does not 
pass verify: 


Passing erase-verify, all bytes: 


b (w + v) 


Total time can be summarized as: 


b (3w + P + 2v) + n (2w + e + v) - 
(v) 


or substituting in times for write, verify, program 
and erase pulse widths: 


b (22.56 x 10-6) + n (10.006355 x 10-3) 


- 
(6.055 x 10-6) Seconds 


Figure 8. Erase Time Calculations 
for 
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Figure 12. tDVWH (tDS WE#) 


vs Vcc and Temperature 
Figure 13. tEHDX (tDH CE#) 


va Vcc and Temperature 
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Figure 14. tAVWH (tAS WE#) 


va Vcc and Temperature 
Figure 15. tWHAX (tAli WE#) 
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Figure 
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Vcc and Temperature 
Figure 
17. tAHEX (tAH CE#) 
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Figure 
18. tWLWH (twp) 
va Vcc and Temperature 
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Figure 20. Dynamic 
VIL 
vs Vcc and Temperature 
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Figure 21. Dynamlt; VIH 
vs Vcc and Temperature 
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Figure 22. IOH TTL va Vcc and Temperature 
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Figure 24. IOl va Vcc and Temperature 
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Figure 23. IOH CMOS va Vcc and Temperature 
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Figure 32. TSOP Lead Configuration 


Wordlines are numbered sequentially from top to bottom. Addresses A9-Ao sequentially decode wordlines: block 
address A19 selects between upper and lower row-decoder. Wordlines 0-1023 serve the left and right quadrants at 
top of device; 1024-2047 serve the lower quadrants. 
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Blocks are numbered sequentially right to left, top to bottom. Columns within a block are numbered left to right. 
I/Os within a block are numbered from 0- 7 left to right. 
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Columns are numbered from left to right across the top quadrants, and left to right across the bottom quadrants. 
Addresses AI5-AIO sequentially count columns. Columns are listed for block 0; other blocks are counted similarly. 
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Intel 28F008SA FlashFile™Memory Evaluation 
Module D, FLASHEVAL4 Product Brief 


• 
28F008SA Adapter 
Board with: 
• 
4O-ld TSOP socket 
('E', standard 
pinout) 


• 
40·ld TSOP socket 
('F', reverse pinout) 


• 
44-ld PSOP socket 


• 
5.25" floppy disk with iFlash2 
Software 
(Version 2.4) 


• 
Technical 
documentation 
describing 
Intel's 28F008SA 
FlashFileTM Memory 


• 
Flash Memory Evaluation 
Kit II 
Installation 
Guide and User's 
Manual with 28F008SA Adapter 
Board installation 
instructions 


Intel's 28F008SA FlashFile™ Memory Evaluation Module provides system 
designers with a cost-effective prototyping tool for writing and erasing 
the 28F008SA FlashFile Memory. This evaluation module is a hardware 
adapter board upgrade to the Intel Flash Memory Evaluation Kit II 
(D, FLASHEVAL2) which supports the 28F008SA in 40-lead TSOP 
(standard and reverse pinouts) and 44-lead PSOP packages. 


Kit Description 


The 28FOO8SA Evaluation Module, used with Intel's Flash Memory Evaluation 
Kit, 


provides the hardware, software and system interface necessary to evaluate and 
integrate Intel's 8Mbit Flash Memory into your next design. 


The module provides instructions 
to install the 28FOO8SA adapter board. Technical 
documentation 
includes 28FOO8SA datasheets, engineering 
reports and application 
notes. Together. they provide a complete description of the technology and 
important design considerations. 


• 


••• 
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28F400BX· T/B, 28F004BX· T/B 
4 MBIT (256K x16, 512K x8) BOOT BLOCK FLASH 
MEMORY FAMILY 


• 
x8/x16 Input/Output 
Architecture 
- 
28F400BX·T, 28F400BX·B 
- 
For High Performance and High 
Integration 
16·blt and 32·bit CPUs 


• 
x8·only Input/Output 
Architecture 
- 
28F004BX·T, 28F004BX·B 
- 
For Space Constrained 8·bit 
Applications 


• 
Optimized High Density Blocked 
Architecture 
- 
One 16·KB Protected Boot Block 
- 
Two 8·KB Parameter Blocks 
- 
One 96·KB Main Block 
-Three 
128·KB Main Blocks 
- 
Top or Bottom Boot Locations 


• 
Extended Cycling Capability 
- 
100,000 Block Erase Cycles 


• 
Automated Word/Byte 
Write and Block 
Erase 
. 


- 
Command User Interface 
- 
Status Registers 
- 
Erase Suspend Capability 


• 
SRAM·Compatible Write Interface 


• 
Automatic 
Power Savings Feature 
- 
1 mA Typical lee Active Current in 
Static Operation 


• 
Very High·Performance 
Read 
- 
60/80 ns Maximum Access Time 
- 
30/40 ns Maximum Output Enable 
Time 


• 
Low Power Consumption 
- 
20 mA Typical x8 Active Read 
Current 
- 
25 mA Typical x16 Active Read 
Current 


• 
Reset/Deep Power· Down Input 
- 
0.2 J.tAlee Typical 
- 
Acts as Reset for Boot Operations 


• 
Extended Temperature Operation 
- 
- 40·C to +85·C 


• 
Write Protection 
for Boot Block 


• 
Hardware Data Protection 
Feature 
- 
Erase/Write 
Lockout During Power 
Transitions 
. 


• 
Industry Standard Surface Mount 
Packaging 
- 
28F400BX: JEDEC ROM Compatible 
44·Lead PSOP 
56·Lead TSOP 
- 
28F004BX: 40·Lead TSOP 


• 
12V Word/Byte 
Write and Block Erase 
- 
Vpp = 12V ± 5% Standard 
- 
Vpp = 12V ± 10% Option 


• 
ETOX III Flash Technology 
-5V 
Read 
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Intel's 4-Mbit Flash Memory 
Family is an extension 
of the Boot Block Architecture 
which includes 
block-selec- 
tive erasure, 
automated 
write and erase operations 
and standard 
microprocessor 
interface. 
The 4-Mbit 
Flash 
Memory 
Family enhances 
the Boot Block Architecture 
by adding 
more density 
and blocks, 
x8/x16 
input/out- 
put control, 
very high speed, 
low power, 
an industry 
standard 
ROM compatible 
pinout 
and surface 
mount 
packaging. 
The 4-Mbit flash family is an easy upgrade 
from Intel's 
2-Mbit 
Boot Block Flash Memory 
Family. 


The Intel 28F400BX-T/B 
are 16-bit wide flash memory 
offerings. 
These 
high density 
flash memories 
provide 
user selectable 
bus operation 
for either 8-bit or 16-bit applications. 
The 28F400BX-T 
and 28F400BX-B 
are 
4,194,304-bit 
non-volatile 
memories 
organized 
as either 524,288 
by1es or 262,144 
words of information. 
They 
are offered 
in 44-Lead 
plastic SOP and 56-Lead TSOP packages. 
The x8/x16 
pinout conforms 
to the industry 
standard 
ROM/EPROM 
pinout. 


The 
Intel 28F004BX- T /B 
are 8-bit wide flash 
memories 
with 4,194,304 
bits organized 
as 524,288 
by1es of 
information. 
They 
are offered 
in a 40-Lead 
TSOP 
package, 
which 
is ideal for space-constrained 
portable 
systems. 


These devices use an integrated 
Command 
User Interface 
(CUI) and Write State Machine 
(WSM) for simplified 
word/by1e 
write 
and block 
erasure. 
The 28F400BX-T /28F004BX-T 
provide 
block 
locations 
compatible 
with 
Intel's 
MCS-186 
family, 
80286, 
i386™, 
i486™, 
i860™ 
and 80960CA 
microprocessors. 
The 28F400BX-B/ 


28F004BX-B 
provide 
compatibility 
with 
Intel's 
80960KX 
and 80960SX 
families 
as well as other 
embedded 
microprocessors. 


The boot 
block 
includes 
a data protection 
feature 
to protect 
the boot code 
in critical 
applications. 
With 
a 
maximum 
access 
time 
of 60 ns, these 
4-Mbit 
flash 
devices 
are very 
high 
performance 
memories 
which 
interface 
at zero-wait-state 
to a wide 
range 
of microprocessors 
and microcontrollers. 
A deep 
power-down 
mode lowers the total Vcc 
power consumption 
to 1 p.W. This is critical 
in handheld 
battery 
powered 
systems. 


For very low power applications 
using a 3.3V supply, refer to the Intel 28F400BX-TL/BL, 
28F004BX-TL/BL 
4- 


Mbit Boot Block 
Flash Memory 
Family datasheet. 


Manufactured 
on Intel's 
0.8 micron 
ETOX 
III process, 
the 4-Mbit 
flash 
memory 
family 
provides 
world 
class 
quality, 
reliability 
and cost-effectiveness 
at the 4-Mbit density 
level. 


Throughout this datasheet the 28F400BX refers to 
both the 28F400BX-T and 28F400BX-B devices and 
28F004BX refers to both the 28F004BX-T and 
28F004BX-B devices. The 4-Mbit flash memory fam- 
ily refers to both the 28F400BX and 28F004BX prod- 
ucts. This datasheet comprises the specifications for 
four separate products in the 4-Mbit flash memory 
family. Section 1 provides an overview of the 4-Mbit 
flash memory family including applications, pinouts 
and pin descriptions. Sections 2 and 3 describe in 
detail the specific memory organizations for the 
28F400BX and 28F004BX products respectively. 
Section 4 combines a description of the family's 
principles of operations. Finally Section 5 describes 
the family's operating specifications. 


XS/X16 Products 
XS-Only Products 


28F400BX-T 
28F004BX-T 


28F400BX-B 
28F004BX-B 


The 28F400BX/28F004BX boot block flash memory 
family is a very high performance 4-Mbit (4,194,304 
bit) memory family organized as either 256 KWords 
(262,144 words) of 16 bits each or 512 Kbytes 
(524,288 bytes) of 8 bits each. 


Seven Separately 
Erasable 
Blocks 
including a 
Hardware-Lockable 
boot 
block 
(16,384 Bytes), 


Two 
parameter 
blocks 
(8,192 Bytes each) and 
Four main blocks (1 block of 98,304 Bytes and 3 
blocks of 131,072 Bytes) are included on the 4-Mbit 
family. An erase operation erases one of the main 
blocks in typically 2.4 seconds and the boot or pa- 
rameter blocks in typically 1.0 seconds independent 
of the remaining blocks. Each block can be indepen- 
dently erased and programmed 100,000 times. 


The 
Boot 
Block 
is located 
at either the top 


(28F400BX-T, 
28F004BX-T) 
or 
the 
bottom 


(28F400BX-B, 28F004BX-B) of the address map in 
order to accommodate different microprocessor pro- 
tocols for boot code location. The hardware locka- 
ble boot block provides the most secure code stor- 
age. The boot block is intended to store the kernel 
code required for booting-up a system. When the 
RP*, pin is between 11.4V and 12.6V the boot block 
is unlocked and program and erase operations can 
be performed. When the RP*' pin is at or below 6.5V 
the boot block is locked and program and erase op- 
erations to the boot block are ignored. 


The 28F400BX products are available in the ROMI 
EPROM compatible 
pinout and 
housed in the 


44-Lead PSOP (Plastic Small Outline) package and 
the 56-Lead TSOP (Thin Small Outline, 1.2mm thick) 
package 
as 
shown 
in 
Figures 3 
and 
4. 
The 


28F004BX products are available in the 40-Lead 
TSOP (1.2mm thick) package as shown in Figure 5. 


The Command User Interface (CUI) serves as the 
interface between the microprocessor or microcon- 
troller and the internal operation of the 28F400BX 
and 28F004BX flash memory products. 


Program and Erase Automation 
allows program 


and erase operations to be executed using a two- 
write command sequence to the CUI. The internal 
Write State Machine (WSM) automatically executes 
the algorithms and timings necessary for program 
and erase operations, including verifications, there- 
by unburdening the microprocessor or microcontrol- 
ler. Writing of memory data is performed in word or 
byte increments for the 28F400BX family and in byte 
increments for the 28F004BX family typically within 
9 p..swhich is a 100% improvement over current 
flash memory products. 


The Status Register (SR) indicates the status of the 
WSM and whether the WSM successfully completed 
the desired program or erase operation. 


Maximum Access Time of 60 ns (TACC) is achieved 
over the commercial temperature range (O·C to 
70·C), 5% Vee supply voltage range (4.75V to 
5.25V) and 30 pF output load. Maximum Access 
Time of 70 ns (TACC) is achieved over the commer- 
cial temperature range, 10% Vee supply range (4.5V 
to 5.5V) and 100 pF output load. 


Ipp maximum Program current Is 40 mA for x16 
operation and 30 mA for xS operation. 
Ipp Erase 


current Is 30 mA maximum. Vpp erase and pro- 
gramming voltage Is 11.4V to 12.6V (Vpp = 12V 
± 5%) under all operating conditions. 
As an op- 


tion, Vpp can also vary between 10.8V to 13.2V (Vpp 
= 12V ± 10%) with a guaranteed number of 100 
block erase cycles. 


Typical lee Active Current of 25 mA is achieved 
for the X16 products (28F400BX). Typical lee Ac- 
tive Current of 20 mA is achieved for the X8 prod- 
ucts (28F400BX, 28F004BX). Refer to the Ice active 
current derating curves in this datasheet. 


The 4-Mbit boot block flash memory family is also 
designed with an Automatic Power Savings (APS) 
feature to minimize system battery current drain and 
allows for very low power designs. Once the device 
is accessed to read array data, APS mode will imme- 
diately put the memory in static mode of operation 
where Ice active current is typically 1 mA until the 
next read is initiated. 


When the CE# and RP# pins are at Vcc and the 
BYTE# 
pin (28F400BX-only) is at either VCC or 


GND the CMOS Standby mode is enabled where 
lee is typically 50 fLA. 


A Deep Power-Down 
Mode is enabled when the 


RP# pin is at ground minimizing power consumption 
and providing write protection during power-up con- 
ditions. lee current during deep power-down mode 
is 0.20 fLA typical. An initial maximum access time 
or Reset Time of 300 ns is required from RP# 
switching until outputs are valid. Equivalently, the 
device has a maximum wake-up time of 215 ns until 
writes to the Command User Interface are recog- 
nized. When RP# is at ground the WSM is reset, the 
Status Register is cleared and the entire device is 
protected from being written to. This feature pre- 
vents data corruption and protects the code stored 
in the device during system reset. The system Reset 
pin can be tied to RP# to reset the memory to nor- 
mal read mode upon activation of the Reset pin. 
With 
on-chip 
program/erase 
automation 
in the 
4-Mbit family and the RP# functionality for data pro- 
tection, when the CPU is reset and even if a program 
or erase command is issued, the device will not rec- 
ognize any operation until RP# returns to its normal 
state. 


For the 28F400BX, Byte-wide 
or Word-wide 
In- 
put/Output 
Control 
is possible by controlling the 
BYTE# pin. When the BYTE# pin is at a logic low 
the device is in the byte-wide mode (x8) and data is 
read and written through DO[0:7]. During the byte- 
wide mode, DO[8:14] are tri-stated and D015/A-1 
becomes the lowest order address pin. When the 
BYTE# pin is at a logic high the device is in the 
word-wide mode (x16) and data is read and written 
through DO[0:15]. 


The 4-Mbit boot block flash memory family com- 
bines high density, high performance, cost-effective 
flash memories with blocking and hardware protec- 
tion capabilities. Its flexibility and versatility will re- 
duce costs throughout the product life cycle. Flash 
memory is ideal for Just-In-Time production flow, re- 
ducing system inventory and costs, and eliminating 
compon~nt handling during the production phase. 


During the product life cycle, when code updates or 
feature enhancements become necessary, flash 
memory will reduce the update costs by allowing ei- 
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ther a user-performed code change via floppy disk 
or a remote code change via a serial link. The 4-Mbit 
boot block flash memory family provides full func- 
tion, blocked flash memories suitable for a wide 
range of applications. These applications include 
Extended 
PC BIOS and ROM·able applications 


storage, Digital Cellular Phone program and data 
storage, Telecommunication 
boot/firmware, Print- 


er firmware/font storage and various other embed- 
ded applications where both program and data stor- 
age are required. 


Reprogrammable systems such as personal com- 
puters, are ideal applications for the 4-Mbit flash 
memory products. Portable and handheld personal 
computer applications are becoming more complex 
with the addition of power managl3ment software to 
take advantage of the latest microprocessor tech- 
nology, the availability of ROM-oased application 
software, pen tablet code for electronic hand writing, 
and diagnostic code. Figure 1 shews an example of 
a 28F400BX-T application. 


This increase in software sophistication augments 
the probability that a code update will be required 
after the PC is shipped. The 4-Mbit flash memory 
products provide an inexpensive update solution for 
the notebook and handheld personal computers 
while extending their product lifetime. Furthermore, 
the 4-Mbit flash 
memory products' 
power-down 


mode provides added flexibility 'for these battery- 
operated portable designs which require operation 
at very low power levels. 


The 4-Mbit flash memory products also provide ex- 
cellent design solutions for Digital Cellular Phone 
and Telecommunication switching applications re- 
quiring high performance, high density storage capa- 
bility coupled with modular software designs, and a 
small 
form 
factor 
package 
(X8-only bus). The 


4-Mbit's blocking scheme allows for an easy seg- 
mentation of the embedded code with; 16 Kbytes of 
Hardware-Protected Boot code, 4 Main Blocks of 
program code and 2 Parameter Blocks of 8 Kbytes 
each for frequently updatable datalstorage and diag- 
nostic messages (e.g., phone numbers, authoriza- 
tion codes). Figure 2 is an example of such an appli- 
cation with the 28F004BX-T. 


These are a few actual examples of the wide range 
of applications for the 4-Mbit Boot Block flash mem- 
ory family which enable system designers achieve 
the best possible product design. Only your imagina- 
tion limits the applicability of such a versatile product 
family. 
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CE# 
28F004BX 
- T 
Vpp 


The 28F400BX 
44-Lead 
PSOP pinout follows 
the in- 


dustry 
standard 
ROM/EPROM 
pinout 
as shown 
in 


Figure 
3. 
Furthermore, 
the 
28F400BX 
56-Lead 


TSOP pinout shown 
in Figure 4 provides 
density 
up- 
grades to future higher density boot block memories. 


ure 5 is 100% 
compatible 
and 
provides 
a density 


upgrade 
for the 2-Mbit 
Boot Block 
flash 
memory 
or 


the 28F002BX. 
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Figure 3. PSOP Lead Configuration 
for x8/x16 
28F400BX 
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Symbol 
Type 
Name and Function 


Ao-Au 
I 
ADDRESS INPUTS for memory addresses. Addresses are internally latched during a write 
cycle. 


Ag 
I 
ADDRESS INPUT: When Ag is at 12V the signature mode is accessed. During this mode Ao 
decodes between the manufacturer and device ID's. When BYTE# 
is at a 109iclow only the 
lower byte of the signatures are read. D015/A-1 
is a don't care in the signature mode when 
BYTE# is low. 


000-007 
I/O 
DATA INPUTS/OUTPUTS: 
Inputs array data on the second CE# and WE# cycle during a 
program command. Inputs commands to the command user interface when CE # and WE # 
are active. Data is internally latched during the write and program cycles. Outputs array, 
Intelligent Identifier and Status Register data. The data pins float to tri-state when the chip is 
deselected or the outputs are disabled. 


008-0015 
I/O 
DATA INPUTS/OUTPUTS: 
Inputs array data on the second CE# and WE# cycle during a 
program command. Data is internally latched during the write and program c\'cles. Outputs 
array data. The data pins float to tri-state when the chip is deselected or the outputs are 
disabled as in the byte-wide mode (BYTE # = "0"). In the byte-wide mode 0015/ A-1 
becomes the lowest order address for data output on 000-007. 


CE# 
I 
CHIP ENABLE: Activates the device's control logic, input buffers, decoders and sense 
amplifiers. CE # is active low; CE # high deselects the memory device and reduces power 
consumption to standby levels. If CE# and RP# are high, but not at a CMOS high level, the 
standby current will increase due to current flow through the CE# and RP# input stages. 


RP# 
I 
RESET/DEEP 
POWER-DOWN: Provides three-state control. Puts the devicE!in deep power- 


down mode. Locks the boot block from program/erase. 


When RP# is at logic high level and equals 6.5V maximum the boot block is locked and 
cannot be programmed or erased. 


When RP # = 11.4V minimum the boot block is unlocked and can be programmed or 
erased. 


When RP# is at a logic low level the boot block is locked, the deep power-down mode is 
enabled and the WSM is reset preventing any blocks from being programmed or erased, 
therefore providing data protection during power transitions. 


When RP # transitions from logic low to logic high the flash memory enters the read-array 
mode. 


OE# 
I 
OUTPUT ENABLE: Gates the device's outputs through the data buffers durirg a read cycle. 
OE# is active low. 


WE# 
I 
WRITE ENABLE: Controls writes to the Command Register and array blocks. WE# is active 
low. Addresses and data are latched on the rising edge of the WE # pulse. 


BYTE # 
I 
BYTE # ENABLE: Controls whether the device operates in the byte-wide mode (x8) or the 
word-wide mode (x16). BYTE # pin must be controlled at CMOS levels to mellt 100A CMOS 
current in the standby mode. BYTE # = "0" enables the byte-wide mode, where data is read 
and programmed on 000-007 
and 0015/ A -1 becomes the lowest order adljress that 


decodes between the upper and lower byte. 008-0014 
are tri-stated during the byte-wide 


mode. BYTE # = "1" enables the word-wide mode where data is read and programmed on 
000-0015. 


Vpp 
PROGRAM/ERASE 
POWER SUPPLY: For erasing memory array blocks or programming 


data in each block. 
Note: Vpp < VPPLMAX 
memory contents cannot be altered. 


Vcc 
DEVICE POWER SUPPLY (SV ±10%,SV 
±S%) 


GND 
GROUND: For all internal circuitry. 


NC 
NO CONNECT: Pin may be driven or left floating. 


DU 
DON'T USE PIN: Pin should not be connected to anything. 
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Symbol 
Type 
Name and Function 


Ao-A18 
I 
ADDRESS 
INPUTS for memory addresses. 
Addresses 
are internally 
latched during 
a write cycle. 


Ag 
I 
ADDRESS 
INPUT: When Ag is at 12V the signature 
mode is accessed. 
During this 
mode Ao decodes 
between 
the manufacturer 
and device ID's. 


DOo-DO? 
I/O 
DATA 
INPUTS/OUTPUTS: 
Inputs array data on the second CE # and WE # cycle 
during a program command. 
Inputs commands 
to the command 
user interface 
when 
CE # and WE # are active. Data is interna!ly 
latched during the write and program 
cycles. Outputs array, Intelligent 
Identifier 
and status register data. The data pins 
float to tri-state when the chip is deselected 
or the outputs are disabled. 


CE# 
I 
CHIP ENABLE: 
Activates 
the device's 
control 
logic, input buffers, decoders 
and 
sense amplifiers. 
CE # is active low; CE # high deselects 
the memory device and 
reduces 
power consumption 
to standby levels. If CE # and RP # are high, but not at 
a CMOS high level, the standby current will increase due to current flow through 
the 
CE# 
and RP# 
input stages. 


RP# 
I 
RESET/DEEP 
POWER DOWN: Provides Three-State 
control. 
Puts the device in 
deep power-down 
mode. Locks the Boot Block from program/erase. 


When RP# 
is at logic high level and equals 6.5V maximum 
the Boot Block is locked 
and cannot be programmed 
or erased. 


When RP# = 11.4V minimum the Boot Block is unlocked 
and can be programmed 
or erased. 


When RP# 
is at a logic low level the Boot Block is locked, the deep power-down 


mode is enabled 
and the WSM is reset preventing 
any blocks from being 
programmed 
or erased, therefore 
providing 
data protection 
during power transitions. 


When RP# 
transitions 
from logic low to logic high, the flash memory enters the 
read-array 
mode. 


OE# 
I 
OUTPUT 
ENABLE: 
Gates the device's 
outputs through the data buffers during a 
read cycle. OE # is active low. 


WE# 
I 
WRITE 
ENABLE: 
Controls 
writes to the Command 
Register and array blocks. WE # 
is active low. Addresses 
and data are latched on the rising edge of the WE # pulse. 


Vpp 
PROGRAM/ERASE 
POWER SUPPLY: 
For erasing memory array blocks or 
programming 
data in each block. 


NOTE: Vpp < VPPLMAX memory contents 
cannot 
be altered. 


VCC 
DEVICE 
POWER SUPPLY 
(5V ± 10%, 5V ± 5%) 


GND 
GROUND: 
For all internal circuitry. 


NC 
NO CONNECT: 
Pin may be driven or left floating. 


DU 
DON'T 
USE PIN: Pin should not be connected 
to anything. 
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The 28F400BX uses a blocked array architecture to 
provide independent erasure of memory blocks. A 
block is erased independently of other blocks in the 
array when an address is given within the block ad- 
dress range and the Erase Setup and Erase Confirm 
commands are written to the CUI. The 28F400BX is 
a random read/write memory, only erasure is per- 
formed by block. 


2.1.1.1 Boot Block Operation 
and Data 
Protection 


The 16-Kby1eboot block provides a lock feature for 
secure code storage. The intent of the boot block is 
to provide a secure storage area for the kernel code 
that is required to boot a system in the event of pow- 
er failure or other disruption during code update. 
This lock feature ensures absolute data integrity by 
preventing the boot block from being written or 
erased when RP# is not at 12V. The boot block can 
be erased and written when RP# is held at 12V for 
the duration of the erase or program operation. This 
allows customers to change the boot code when 
necessary while providing security when needed. 
See the Block Memory Map section for address lo- 
cations of the boot block for the 28F400BX-T and 
28F400BX-B. 


2.1.1.2 Parameter 
Block Operation 


The 28F400BX has 2 parameter blocks (8-Kby1es 
each). The parameter blocks are intended to provide 
storage for frequently updated system parameters 
and configuration or diagnostic information. The pa- 
rameter blocks can also be used to store additional 
boot or main code. The parameter blocks however, 
do not have the hardware write protection feature 
that the boot block has. The parameter blocks pro- 
vide for more efficient memory utilization when deal- 
ing with parameter changes versus regularly blocked 
devices. See the Block Memory Map section for ad- 
dress locations of the parameter blocks for the 
28F400BX-T and 28F400BX-B. 


2.1.1.3 Main Block Operation 


Four main blocks of memory exist on the 28F400BX 
(3 x 128-Kby1eblocks and 1 x 96-Kby1eblocks). See 
the following section on Block Memory Map for the 
address location of these blocks for the 28F400BX-T 
and 28F400BX-Bproducts. 


Two versions of the 28F400BX product exist to sup- 
port two different memory maps of the array blocks 
in order to accommodate different microprocessor 
protocols for boot code location. The 28F400BX-T 
memory map is inverted from the 28F400BX-B 
memory map. 


2.1.2.1. 28F400BX-B 
Memory 
Map 


The 28F400BX-B device has the 16-Kby1e boot 
block located from OOOOOH 
to 01FFFH to accommo- 
date those microprocessors that boot from the bot- 
tom 
of 
the 
address 
map 
at 
OOOOOH.In 
the 
28F400BX-B the first 8-Kby1e parameter block re- 
sides in memory space from 02000H to 02FFFH. 
The second 8-Kby1e parameter block resides in 
memory space 
from 
03000H 
to 
03FFFH. The 
96-Kby1emain block resides in memory space from 
04000H to OFFFFH. The three 
128-Kby1e main 
block resides in memory space from 10000H to 
1FFFFH, 20000H 
to 
2FFFFH 
and 
30000H 
to 
3FFFFH (word locations). See Figure 7. 
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2.1.2.2 
28F400BX-T 
Memory 
Map 


The 28F400BX-T device has the 16-Kbyte boot 
block located from 3EOOOHto 3FFFFH to accom- 
modate those microprocessors that boot from the 
top of the address map. In the 28F400BX-T the first 
8-Kbyte parameter block resides in memory space 
from 3DOOOHto 3DFFFH. The second 8-Kbyte pa- 
rameter 
block 
resides 
in 
memory 
space 
from 
3COOOHto 3CFFFH. The 96-Kbyte main block re- 
sides in memory space from 30000H to 3BFFFH. 
The three 128-Kbyte main blocks reside in memory 
space from 20000H to 2FFFFH, 10000H to 1FFFFH 
and OOOOOH 
to OFFFFHas shown below in Figure 8. 
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The 28F004BX uses a blocked array architecture to 
provide independent erasure of memory blocks. A 
block is erased independently of other blocks in the 
array when an address is given within the block ad- 
dress range and the Erase Setup and Erase Confirm 
commands are written to the CUI. The 28F004BX is 
a random read/write memory, only erasure is per- 
formed by block. 


3.1.1.1 Boot Block Operation 
and Data 


Protection 


The 16-Kbyte boot block provides a lock feature for 
secure code storage. The intent of the boot block is 
to provide a secure storage area for the kernel code 
that is required to boot a system in the event of pow- 
er failure or other disruption during code update. 
This lock feature ensures absolute data integrity by 
preventing the boot block from being programmed 
or erased when RPi' is not at 12V. The boot block 
can be erased and programmed when RPi' is held 
at 12V for the duration of the erase or program oper- 
ation. This allows customers to change the boot 
code when necessary while still providing security 
when needed. See the Block Memory Map section 
for address locations of the boot block for the 
28F004BX-T and 28F004BX-B. 


3.1.1.2 Parameter 
Block Operation 


The 28F004BX has 2 parameter blocks (8-Kbytes 
each). The parameter blocks are intended to provide 
storage for frequently updated system parameters 
and configuration or diagnostic information. The pa- 
rameter blocks can also be used to store additional 
boot or main code. The parameter blocks however, 
do not have the hardware write protection feature 
that the boot block has. Parameter blocks provide 
for more efficient memory utilization when dealing 
with 
small 
parameter 
changes 
versus 
regularly 


blocked devices. See the Block Memory Map sec- 
tion for address locations of the parameter blocks 
for the 28F004BX-T and 28F004BX-B. 


3.1.1.3 Main Block Operation 


Four main blocks of memory exist on the 28F004BX 
(3 x 128-Kbyte blocks and 1 x 96-Kbyte blocks). 
See the following section on Block Memory Map for 
the 
address 
location 
of 
these 
blocks 
for 
the 


28F004BX-T and 28F004BX-B. 


Two versions of the 28F004BX product exist to sup- 
port two different memory maps of the array blocks 
in order to accommodate different microprocessor 
protocols for boot code location. The 28F004BX-T 
memory map is inverted from the 28F004BX-B 
memory map. 


3.1.2.1 28F004BX-B 
Memory 
Map, 


The 28F004BX-B device has the 16-Kbyte boot 
block located from OOOOOH 
to 03FFFH to accommo- 


date those microprocessors that bClotfrom the bot- 
tom 
of 
the 
address 
map 
at 
OOOOOH.In the 


28F004BX-B the first 8-Kbyte par~lmeter block re- 
sides in memory from 04000H to OEiFFFH.The sec- 
ond 8-Kbyte parameter block res des in memory 
space from 06000H to 07FFFH. Th,e96-Kbyte main 
block resides in memory space from 08000H to 
1FFFFH. The three 128-Kbyte main block reside in 
memory space from 20000H to 3FFFFH, 40000H to 
5FFFFH and 60000H to 7FFFFH. See Figure 10. 
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The 28F004BX·T device has the 16-Kbyte boot 
block located from 7COOOHto 7FFFFH to accom- 
modate those microprocessors that boot from the 
top of the address map. In the 28F004BX·T the first 
8-Kbyte parameter block resides in memory space 
from 7AOOOHto 7BFFFH. The second 8-Kbyte pa- 
rameter 
block 
resides 
in 
memory 
space 
from 
78000H to 79FFFH. The 96-Kbyte main block re- 
sides in memory space from 60000H to 77FFFH. 
The three 128-Kbyte main blocks reside in memory 
space from 40000H to 5FFFFH, 20000H to 3FFFFH 
and OOOOOHto 1FFFFH. 
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Flash memory augments EPROM functionality with 
in-circuit electrical write and erase. The 4-Mbit flash 
family utilizes a Command User Interface (CUI) and 
internally generated and timed algorithms to simplify 
write and erase operations. 


The CUI allows for 100% TTL-Ievel control inputs, 
fixed power supplies during erasure and program- 
ming, and maximum EPROM compatibility. 


In the absence of high voltage on the Vpp pin, the 
4-Mbit boot block flash family will only successfully 
execute the following commands: Read Array, Read 
Status Register, Clear Status Register and Intelli- 
gent Identifier mode. The device provides standard 
EPROM read, standby and output disable opera- 
tions. Manufacturer Identification and Device Identi- 
fication data can be accessed through the CUI or 
through the standard EPROM Ag high voltage ac- 
cess (VIO)for PROM programming equipment. 


The same EPROM read, standby and output disable 
functions are available when high voltage is applied 
to the Vpp pin. In addition, high voltage on Vpp al- 
lows write and erase of the device. All functions as- 
sociated with altering memory contents: write and 
erase, Intelligent Identifier read and Read Status are 
accessed via the CUI. 


The purpose of the Write State Machine (WSM) is to 
completely automate the write and erasure of the 
device. The WSM will begin operation upon receipt 
of a signal from the CUI and will report status back 
through a Status Register. The CUI will handle the 
WEII interface to the data and address latches, as 
well as system software requests for status while the 
WSM is in operation. 


4.1 
28F400BX 
Bus Operations 


Flash memory reads, erases and writes in-system 
via the local CPU. All bus cycles to or from the flash 
memory conform to standard microprocessor bus 
cycles. 


Mode 
Notes 
RP# 
CE# 
OE# 
WE# 
Ag 
Ao 
'(pp 
000-15 


Read 
1,2,3 
VIH 
VIL 
VIL 
VIH 
X 
X 
X 
DOUT 


Output 
Disable 
VIH 
VIL 
VIH 
VIH 
X 
X 
X 
HighZ 


Standby 
VIH 
VIH 
X 
X 
X 
X 
IX 
HighZ 


Deep Power-Down 
9 
VIL 
X 
X 
X 
X 
X 
X 
HighZ 


Intelligent 
Identifier 
(Mfr) 
4 
VIH 
VIL 
VIL 
VIH 
VID 
VIL 
X 
0089H 


Intelligent 
Identifier 
(Device) 
4,5 
VIH 
VIL 
VIL 
VIH 
VID 
VIH 
X 
4470H 
4471H 


Write 
6,7,8 
VIH 
VIL 
VIH 
VIL 
X 
X 
X 
DIN 


Mode 
Notes 
RP# 
CE# 
OE# 
WE# 
Ag 
Ao 
A-1 
Vpp 
D(:»0-7 
DQ8-14 


Read 
1,2.3 
VIH 
VIL 
VIL 
VIH 
X 
X 
X 
X 
DOUT 
HighZ 


Output 
Disable 
VIH 
VIL 
VIH 
VIH 
X 
X 
X 
X 
HighZ 
HighZ 


Standby 
VIH 
VIH 
X 
X 
X 
X 
X 
X 
HighZ 
HighZ 


Deep Power-Down 
9 
VIL 
X 
X 
X 
X 
X 
X 
X 
HighZ 
HighZ 


Intelligent 
4 
VIH 
VIL 
VIL 
VIH 
VID 
VIL 
X 
X 
89H 
HighZ 
Identifier 
(Mfr) 


Intelligent 
4,5 
VIH 
VIL 
VIL 
VIH 
VID 
VIH 
X 
X 
70H 
HighZ 
Identifier 
(Device) 
71H 


Write 
6,7.8 
VIH 
VIL 
VIH 
VIL 
X 
X 
X 
X 
DIN 
HighZ 


NOTES: 
1. Refer to DC Characteristics. 
2. X can be VL. VIH for control 
pins and addresses. 
VPPL or VpPH for Vpp. 
3. See DC Characteristics 
for VPPL. VPPH. VHH. VIO voltages. 
4. Manufacturer 
and Device 
codes 
may also be accessed 
via a CUI write sequence. 
A,-A17 = X. 


5. Device 
10 = 4470H 
for 28F400BX-T 
and 4471H 
for 28F400BX·B. 
6. Refer to Table 
4 for valid DIN during 
a write operation. 
7. Command 
writes 
for Block 
Erase or Word/Byte 
Write 
are only executed 
when 
Vpp = VpPH. 


8. To write or erase the boot 
block. 
hold RP# 
at VHH. 
9. RP# 
must be at GND 
±O.2V 
to meet the 1.2 IJoA maximum 
deep 
power·down 
current. 


Mode 
Notes 
RP# 
CE# 
OE# 
WE# 
Ag 
Ao 
Vpp 
DQO-7 


Read 
1,2,3 
VIH 
VIL 
VIL 
VIH 
X 
X 
X 
DOUT 


Output Disable 
VIH 
VIL 
VIH 
VIH 
X 
X 
X 
HighZ 


Standby 
VIH 
VIH 
X 
X 
X 
X 
X 
HighZ 


Deep Power-Down 
9 
VIL 
X 
X 
X 
X 
X 
X 
HighZ 


Intelligent Identifier (Mfr) 
4 
VIH 
VIL 
VIL 
VIH 
VID 
VIL 
X 
89H 


Intelligent Identifier (Device) 
4,5 
VIH 
VIL 
VIL 
VIH 
VID 
VIH 
X 
78H 
79H 


Write 
6,7,8 
VIH 
VIL 
VIH 
VIL 
X 
X 
X 
DIN 


NOTES: 
1. Refer to DC Characteristics. 
2. X can be VIL or VIH for control 
pins and addresses, 
VpPL or VPPH for Vpp. 
3. See DC Characteristics 
for VPPL, VPPH, VHH, VID voltages. 
4. Manufacturer 
and Device 
codes 
may also be accessed 
via a CUI write sequence. 
Al-A18 = X. 
5. Device 
10 = 78H for 28F004BX-T 
and 7SH for 28F004BX·B. 
6. Refer to Table 
4 for valid DIN during 
a write operation. 


7. Command 
writes 
for Block erase 
or by1e program 
are only executed 
when 
VPP = VPPH. 


6. Program 
or erase the Boot block 
by holding 
RP# 
at VHH. 
S. RP# 
must be at GND ±O.2V 
to meet the 1.2 /-LA maximum 
deep power-down 
current. 


4.3 ReadOperations 


The 4-Mbit boot block flash family has three user 
read modes; Array, Intelligent Identifier, and Status 
Register. Status Register read mode will be dis- 
cussed in detail in the "Write Operations" section. 


During power-up conditions (VCCsupply ramping), it 
takes a maximum of 600 ns from when VCC is at 
4.5V minimum to valid data on the outputs. 


If the memory is not in the Read Array mode, it is 
necessary to write the appropriate read mode com- 
mand to the CUI. The 4-Mbit boot block flash family 
has three control functions, all of which must be 
logically active, to 
obtain data at the 
outputs. 
Chip-Enable CE# is the device selection control. 
Power-Down RP# is the device power control. Out- 
put-Enable OE# 
is the 
DATA INPUT/OUTPUT 


(00[0:15] 
or 00[0:7]) 
direction control and when 


active is used to drive data from the selected memo- 
ry on to the I/O bus. 


4.3.1.1 Output Control 


With OE# at logic-high level (VIH),the output from 
the device is disabled and data input/ output pins 
(00[0:15] 
or 00[0:7] 
are tri-stated. Data input is 


then controlled by WE# . 


4.3.1.2 Input Control 


With WE# at logic-high level (VIH),input to the de- 
vice is disabled. Data Input/Output pins (00[0:15] 
or 00[0:7]) 
are controlled by OE#. 


The manufacturer and device codes are read via the 
CUI or by taking the As pin to 12V. Writing 90H to 
the CUI places the device into Intelligent Identifier 
read mode. A read of location OOOOOHoutputs the 
manufacturer's identification code, 0089H, and loca- 
tion 00001H outputs the device code; 4470H for 
28F400BX-T, 
4471H 
for 
28F400BX-B. 
When 
BYTE# is at a logic low only the lower byte of the 
above signatures is read and 0015/ A-1 is a "don't 
care" during Intelligent Identifier mode. A read array 
command must be written to the memory to return to 
the read array mode. 


The manufacturer and device codes are also read 
via the CUI or by taking the As pin to 12V. Writing 
90H to the CUI places the device into Intelligent 
Identifier read mode. A read of location OOOOOH 
out- 


puts the manufacturer's identification code, 89H, 
and location 00001H outputs the device code; 78H 
for 28F004BX-T, 79H for 28F004BX-B. 


• 


Commands are written to the CUI using standard mi- 
croprocessor write timings. The CUI serves as the 
interface between the microprocessor and the inter- 
nal chip operation. The CUI can decipher Read Ar- 
ray, Read Intelligent Identifier, Read Status Register, 
Clear Status Register, Erase and Program com- 
mands. In the event of a read command, the CUI 
simply points the read path at either the array, the 
Intelligent Identifier, or the status register depending 
on the specific read command given. For a program 
or erase cycle, the CUI informs the write state ma- 
chine that a write or erase has been requested. Dur- 
ing a program cycle, the Write State Machine will 
control the program sequences and the CUI will only 
respond to status reads. During an erase cycle, the 
CUI will respond to status reads and erase suspend. 
After the Write State Machine has completed its 
task, it will allow the CUI to respond to its full com- 
mand set. The CUI will stay in the current command 
state until the microprocessor issues another com- 
mand. 


The CUI will successfully initiate an erase or write 
operation only when Vpp is within its voltage range. 
Depending upon the application, the system design- 
er may choose to make the Vpp power supply 
switchable, available only when memory updates 
are desired. The system designer can also choose 
to "hard-wire" Vpp to 12V. The 4-Mbit boot block 
flash family is designed to accommodate-either 
de- 
sign practice. It is recommended that RP# be tied to 
logical Reset for data protection during unstable 
CPU reset function as described in the "Product 
Family Overview" section. 


In the case of Boot Block modifications (write and 
erase), RP# is set to VHH = 12V typically, in addi- 
tion to Vpp at high voltage. 


However, if RP# is not at VHHwhen a program or 
erase operation of the boot blocl< is attempted, the 
corresponding status register bit (Bit 4 for Program 
and Bit 5 for Erase, refer to Table 5 for Status Regis- 
ter Definitions) is set to indicate the failure to com- 
plete the operation. 


The Command User Interface (CUI) serves as the 
interface to the microprocessor. The CUI points the 
read/write path to the appropriate circuit block as 
described in the previous section. After the WSM 
has completed its task, it will set the WSM Status bit 
to a "1 ", which will also allow the CUI to respond to 
its full command set. Note that after the WSM has 
returned control to the CUI, the CUI will remain in its 
current state. 


Comm~nd 
Device 
Mode 
Codes 


00 
Invalid/Reserved 
10 
Alternate Pro~lramSetup 
20 
Erase Setup 
40 
Program Setup 
50 
Clear Status Fiegister 
70 
Read Status Flegister 
90 
Intelligent Identifier 
BO 
Erase Suspend 
DO 
Erase Resumo/Erase Confirm 
FF 
Read Array 


4.4.2.2 
Command 
Function De~lcriptions 


Device operations are selected by writing specific 
commands into the CUI. Table 4 defines the 4-Mbit 
boot block flash family commands. 


Bus 
Notes 
First Bus Cycle 
Second 
Bus Cycle 


Command 
Cycles 
Req'd 
8 
Operation 
Address 
Data 
Operation 
Address 
Data 


Read Array 
1 
1 
Write 
X 
FFH 


Intelligent 
Identifier 
3 
2,4 
Write 
X 
90H 
Read 
IA 
110 


Read Status Register 
2 
3 
Write 
X 
70H 
Read 
X 
SRD 


Clear Status Register 
1 
Write 
X 
50H 


Erase Setup/Erase 
Confirm 
2 
5 
Write 
BA 
20H 
Write 
BA 
DOH 


Word/Byte 
Write Setup/Write 
2 
6,7 
Write 
WA 
40H 
Write 
WA 
WD 


Erase Suspend/Erase 
Resume 
2 
Write 
X 
BOH 
Write 
X 
DOH 


Alternate 
Word/Byte 
2 
6, 7 
Write 
WA 
10H 
Write 
WA 
WD 
Write Setup/Write 


NOTES: 
1. Bus operations are defined in Tables 1, 2, 3. 
2. IA = Identifier Address: OOHfor manufacturer code. 01H for device code. 
3. SRO = Data read from Status Register. 
4. 110 = Intelligent Identifier Data. 
Following the Intelligent Identifier Command, two read operations access manufacturer and device codes. 
5. BA = Address within the block being erased. 
6. WA = Address to be written. 
WO = Data to be written at location WO. 
7. Either 40H or 10H commands is valid. 
8. When writing commands to the device, the upper data bus [008,0015] 
= X (28F400BX-only) which is either Vcc or Vss 
to avoid burning additional current. 


These 
are unassigned 
commands. 
It is not recom- 


mended 
that the customer 
use any command 
other 


than the valid commands 
specified 
above. 
Intel re- 
serves 
the right to redefine 
these 
codes 
for future 


functions. 


This single 
write 
command 
points 
the read path at 


the 
array. 
If the 
host 
CPU performs 
a CE#/OE# 


controlled 
read immediately 
following 
a two-write 
se- 
quence 
that 
started 
the WSM, 
then the device 
will 


output 
status 
register 
contents. 
If the 
Read 
Array 


command 
is given 
after 
Erase Setup 
the device 
is 


reset to read the array. A two Read Array command 
sequence 
(FFH) is required 
to reset to Read Array 


after Program 
Setup. 


Intelligent 
Identifier 
(90H) 


After this command 
is executed, 
the CUI points the 


output 
path to the Intelligent 
Identifier 
circuits. 
Only 


Intelligent 
Identifier 
values at addresses 
0 and 1 can 
be read 
(only address 
Ao is used in this mode, 
all 


other address 
inputs are ignored). 


Read Status 
Register 
(70H) 


This is one of the two commands 
that is executable 


while the state machine 
is operating. 
After this com- 


mand is written, 
a read of the device 
will output 
the 


contents 
of the status register, 
regardless 
of the ad- 


dress presented 
to the device. 


The device automatically 
enters this mode after pro- 


gram or erase has completed. 


Clear 
Status 
Register 
(SOH) 


The 
WSM 
can 
only 
set 
the 
Program 
Status 
and 


Erase 
Status 
bits in the 
status 
register, 
it can 
not 


clear 
them. 
Two 
reasons 
exist 
for 
operating 
the 


status register 
in this fashion. 
The first is a synchro- 


nization. 
The WSM 
does 
not know 
when 
the 
host 


CPU has read the status register, 
therefore 
it would 


not know when to clear the status bits. Secondly, 
if 
the CPU is programming 
a string of bytes, it may be 


more efficient 
to query the status 
register 
after pro- 


gramming 
the string. 
Thus, if any errors 
exist while 


programming 
the string, the status register will return 


the accumulated 
error status. 


Program 
Setup (40H or 10H) 


This command simply sets the CUI into a state such 
that the next write will load the address and data 
registers. Either 40H or 10H can be used for Pro- 
gram Setup. Both commands are included to ac- 
commodate efforts to achieve an industry standard 
command code set. 


Program 


The second write after the program setup command, 
will latch addresses and data. Also, the CUI initiates 
the WSM to begin execution of the program algo- 
rithm. While the WSM finishes the algorithm, the de- 
vice will output Status Register contents. Note that 
the WSM cannot be suspended during program- 
ming. 


Erase Setup (20H) 


Prepares the CUI for the Erase Confirm command. 
No other action is taken. If the next command is not 
an Erase Confirm command then the CUI will set 
both the Program Status and Erase Status bits of the 
Status Register to a "1", place the device into the 
Read Status Register state, and wait for another 
command. 


If the previous command was an Erase Setup com· 
mand, then the CUI will enable the WSM to erase, at 
the same time closing the address and data latches, 
and respond only to the Read Status Register and 
Erase Suspend commands. While the WSM is exe· 
cuting, the device will output Status Register data 
when OE# is toggled low. Status Register data can 
only be updated by toggling either OE# or CE# low. 


Erase Suspend 
(BOH) 


This command only has meaning while the WSM is 
executing an Erase operation, and therefore will only 
be responded to during an erase operation. After 
this command has been executed, the CUI will set 
an output that directs the WSM to suspend Erase 
operations, and then return to responding to only 
Read Status Register or to the Erase Resume com- 
mands. Once the WSM has reached the Suspend 
state, it will set an output into the CUI which allows 
the CUI to respond to the Read Array, Read Status 
Register, and Erase Resume commands. In this 
mode, the CUI will not respond to any other com- 
mands. The WSM will also set the WSM Status bit to 
a "1". The WSM will continue to run, idling in the 
SUSPEND state, regardless of the state of all input 


control pins, with the exclusion of RP#. RP# will 
immediately shut down the WSM and the remainder 
of the chip. During a suspend opBration, the data 
and address latches will remain closed, but the ad- 
dress pads are able to drive the address into the 
read path. 


Erase Resume 
(DOH) 


This command will cause the CUI to clear the Sus- 
pend state and set the WSM Status bit to a "0", but 
only if an Erase Suspend command was previously 
issued. Erase Resume will not havElany effect in all 
other conditions. 


The 4-Mbit boot block flash family contains a status 
register which may be read to determine when a pro- 
gram or erase operation is complElte, and whether 
that operation completed successfully. The status 
register may be read at any time by writing the Read 
Status command to the CUI. After writing this com· 
mand, all subsequent Read operations output data 
from the status register until anotl1er command is 
written to the CUI. A Read Array cClmmandmust be 
written to the CUI to return to the Read Array mode. 


The status register bits are output on 00[0:7] 
whether the device is in the byte-wide (x8) or word· 
wide (x16) mode for the 28F400BX. In the word-wide 
mode the upper byte, 00[8:15) 
is s,etto OOHduring 


a Read Status command. In the I)yte-wide mode, 
00[8:14) 
are tri-stated and D015/A-1 
retains the 


low order address function. 


It should be noted that the contents of the status 
register are latched on the falling '3dge of OE# or 
CE# whichever occurs last in the read cycle. This 
prevents possible bus errors which might occur if the 
contents of the status register change while reading 
the status register. CE# or OE# must be toggled 
with each subsequent status read, corthe completion 
of a program or erase operation will not be evident. 


The Status Register is the interface between the mi- 
croprocessor and the Write State Machine (WSM). 
When the WSM is active, this register will indicate 
the status of the WSM, and will also hold the bits 
indicating whether or not the WSM Viassuccessful in 
performing the desired operation. The WSM sets 
status bits "Three" through "Seven" and clears bits 
"Six" 
and "Seven", 
but cannot dear 
status bits 


"Three" 
through "Five". 
These bits can only be 


cleared by the controlling CPU through the use of 
the Clear Status Register command. 


4.4.3.1 Status Register Bit Definition 


Table 5. Status Register Definitions 


~ 
ESS 


7 
6 


SR.7 = WRITE 
STATE 
MACHINE 
STATUS 


1 = Ready 
0= 
Busy 


SR.6 = ERASE 
SUSPEND 
STATUS 


1 = Erase Suspended 
o = Erase in Progress/Completed 


SR.5 = ERASE 
STATUS 
1 = Error in Block 
Erasure 
o = Successful 
Block 
Erase 


SR.4 = PROGRAM 
STATUS 
1 = Error In Byte/Word 
Program 


o = Successful 
Byte/Word 
Program 


SR.3 = Vpp STATUS 
1 = Vpp Low Detect; 
Operation 
Abort 


0= 
Vpp OK 


4.4.3.2 Clearing the Status Register 


Certain bits in the status register are set by the write 
state machine, and can only be reset by the system 
software. These bits can indicate various failure con- 
ditions. By allowing the system software to control 
the resetting of these bits, several operations may 
be performed (such as cumulatively programming 
several bytes or erasing multiple blocks in se- 
quence). The status register may then be read to 
determine if an error occurred during that program- 
ming or erasure series. This adds flexibility to the 
way the device may be programmed or erased. To 
clear the status register, the Clear Status Register 
command is written to the CUI. Then, any other 
command may be issued to the CUI. Note again that 
before a read cycle can be initiated, a Read Array 
command must be written to the CUI to specify 
whether the read data is to come from the array, 
status register, or Intelligent Identifier. 


ps I vpps I 


4 
3 


NOTES: 


Write State 
Machine 
Status 
bit must first be checked 
to 


determine 
byte/word 
program 
or block 
erase 
comple- 


tion, 
before 
the 
Program 
or 
Erase 
Status 
bits 
are 


checked 
for success. 


When 
Erase 
Suspend 
is issued, 
WSM 
halts 
execution 
and sets both WSMS 
and ESS bits to "1". 
ESS bit re- 
mains 
set to "1" 
until 
an Erase 
Resume 
command 
is 


issued. 


When 
this bit is set to "1". 
WSM 
has applied 
the maxi- 


mum 
number 
of erase 
pulses 
to the 
block 
and 
is still 
unable 
to successfully 
perform 
an erase verify. 


When 
this 
bit is set to 
"1", 
WSM 
has attempted 
but 
failed 
to Program 
a byte or word. 


The Vpp Status 
bit unlike 
an AID 
converter, 
does 
not 


provide 
continuous 
indication 
of Vpp level. 
The 
WSM 


interrogates 
the Vpp level 
only 
after 
the 
byte 
write 
or 


block 
erase 
command 
sequences 
have 
been 
entered 


and 
informs 
the 
system 
if Vpp has not been 
switched 


on. The Vpp Status 
bit is not guaranteed 
to report 
ac- 
curate 
feedback 
between 
VPPL 
and VPPH. 


These 
bits 
are reserved 
for future 
use and 
should 
be 


masked 
out when 
polling 
the Status 
Register. 


Program is executed by a two-write sequence. The 
Program Setup command is written to the CUI fol- 
lowed by a second write which specifies the address 
and data to be programmed. The write state ma- 
chine will execute a sequence of internally timed 
events to: 
1. Program the desired bits of the addressed mem- 


ory word (byte), and 
2. Verify that the desired bits are sufficiently pro- 


grammed. 


Programming of the memory results in specific bits 
within a byte or word being changed to a "0". 


If the user attempts to program "1 "s, there will be no 
change of the memory cell content and no error oc- 
curs. 


Similar to erasure, the status register indicates 
whether programming is complete. While the pro- 
gram sequence is executing, bit 7 of the status regis- 
ter is a "0". The status register can be polled by 
toggling either CE# or OE# to determine when the 
program sequence is complete. Only the Read 
Status Register command is valid while program- 
ming is active. 


When programming is complete, the status bits, 
which indicate whether the program operation was 
successful, should be checked. If the programming 
operation was unsuccessful, Bit 4 of the status regis- 
ter is set to a "1" to indicate a Program Failure. If 
Bit 3 is set then Vpp was not within acceptable limits, 
and the WSM will not execute the programming se- 
quence. 


The status register should be cleared before at- 
tempting the next operation. Any CUI instruction can 
follow after programming is completed; however, it 
must be recognized that reads from the memory, 
status register, or Intelligent Identifier cannot be ac- 
complished until the CUI is given the appropriate 
command. A Read Array command must first be giv- 
en before memory contents can be read. 


Figure 12 shows a system software flowchart for de- 
vice byte programming operation. Figure 13 shows a 
similar flowchart for device word programming oper- 
ation (28F400BX-only). 


Erasure of a single block is initiated by writing the 
Erase Setup and Erase Confirm commands to the 
CUI, along with the addresses, A[12:17] 
for the 


28F400BX or A[12:18] for the 28F004BX, identifying 
the block to be erased. These addresses are latched 
internally when the Erase Confirm command is is- 
sued. Block erasure results in all bits within the block 
being set to "1". 


The WSM will execute a sequence of internally 
timed events to: 
1. Program all bits within the block 
2. Verify that all bits within the block are sufficiently 


programmed 
3. Erase all bits within the block and 


4. Verify that all bits within the block are sufficiently 


erased 


While the erase sequence is executing, Bit 7 of the 
status register is a "0". 


When the status register indicates that erasure is 
complete, the status bits, which indicate whether the 
erase operation was successful, should be checked. 
If the erasure operation was unsuccessful, Bit 5 of 
the status register is set to a "1" 
to indicate an 


Erase Failure. If Vpp was not within acceptable limits 
after the Erase Confirm command is issued, the 
WSM will not execute an erase sequence; instead, 
Bits of the status register is set to a "1" to indicate 
an Erase Failure, and Bit 3 is set to a "1" to identify 
that Vpp supply voltage was not within acceptable 
limits. 


The status register should be cloared before at- 
tempting the next operation. Any CUI instruction can 
follow after erasure is completed; however, it must 
be recognized that reads from thl3 memory array, 
status register, or Intelligent Identifi'9rcan not be ac- 
complished until the CUI is given the appropriate 
command. A Read Array command must first be giv- 
en before memory contents can bElread. 


Figure 14 shows a system software flowchart for 
Block Erase operation. 


4.4.5.1 
Suspending 
and Resuming 
Erase 


Since an erase operation typically requires 1 to 3 
seconds to complete, an Erase Suspend command 
is provided. This allows erase-sequence interruption 
in order to read data from another block of the mem- 
ory. Once the erase sequence is started, writing the 
Erase Suspend command to the CUI requests that 
the Write State Machine (WSM) pause the erase se- 
quence at a predetermined point in the erase algo- 
rithm. The status register must be read to determine 
when the erase operation has been suspended. 


At this point, a Read Array command can be written 
to the CUI in order to read data from blocks other 
than that which is being suspended. The only other 
valid command at this time is thEI Erase Resume 
command or Read Status Register operation. 


Figure 15 shows a system softwarE'flowchart detail- 
ing the operation. 


infel~ 


During Erase Suspend mode, the chip can go into a 
pseudo-standby mode by taking CE# to VIH and the 
active current is now a maximum of 10 mA. If the 
chip is enabled while in this mode by taking CE# to 
Vll, the Erase Resume command can be issued to 
resume the erase operation. 


Upon completion of reads from any block other than 
the block being erased, the Erase Resume com- 
mand must be issued. When the Erase Resume 
command is given~the WSM will continue with the 
erase sequence and complete erasing the block. As 
with the end of erase, the status register must be 
read, cleared, and the next instruction issued in or- 
der to continue. 


Intel has designed extended cycling capability into 
its ETOX III flash memory technology. The 4-Mbit 
boot block flash family is designed for 100,000 pro- 
gram/ erase cycles on each of the seven blocks. The 
combination of low electric fields, clean oxide pro- 
cessing and minimized oxide area per memory cell 
subjected to the tunneling electric field, results in 
very high cycling capability. 


• 


Bus 
Command 
Comments 
Operation 


Write 
setup 
Data = 40H 


Program 
Address = Byte to be 
programmed 


Write 
Program 
Data to be programmed 


Address = Byte to be 
programmed 


Read 
Status Register Data. 
Toggle OE # or CE# to update 
Status Register 


Standby 
Check SR.7 


1 = Ready, 0 = Busy 


Repeat for subsequent bytes. 


Full status check can be done after each byte or after a 
sequence of bytes. 


Write FFH after the last byte programming operation to 
reset the device to Read Array Mode. 


Bus 
Command 
Comments 
Operation 


Standby 
CheckSR.3 
1 = Vpp Low Detect 


Standby 
Check SR.4 
1 = Byte Program Error 


SR.3 MUST be cleared, if set during a program attempt, 
before further attempts are allowed by the Write State 
Machine. 


SR.4 is only cleared by the Clear Status Register 
Command, in cases where multiple bytes are programmed 
before full status is checked. 


If error is detected, clear the Status Register before 
attempting retry or other error recovery. 


Bus 
Command 
Comments 
Operation 


Write 
Setup 
Data = 40H 
Program 
Address = Word to be 
programmed 


Write 
Program 
Data to be programmed 


Address = Word to be 
programmed 


Read 
Status Register Data. 
Toggle OE# orCE# 
to update 


Status Register 


Standby 
Check SR.7 


1 = Ready, 0 = Busy 


Repeat for subsequent words. 


Full status check can be done after each word or after a 
sequence of words. 


Write FFH after the last word programming operation to 
reset the device to Read Array Mode. 


Bus 
Command 
Comments 
Operation 


Standby 
Check SR.3 


1 = Vpp Low Detect 


Standby 
Check SR.4 


1 = Word Program Error 


SR.3 MUST be cleared, if set during a program attempt, 
before further attempts are allowed by the Write State 
Machine. 


SR.4 is only cleared by the Clear Status Register 
Command, in cases where multiple words are programmed 
before full status is checked. 


If error is detected, clear the Status Register before 
attempting retry or other error recovery. 


• 


Bus 
Command 
Comments 
Operation 


Write 
Setup 
Data = 20H 


Erase 
Address = Within block to be 
erased 


Write 
Erase 
Data = DOH 
Address = Within block to be 
erased 


Read 
Status Register Data. 


Toggle OE # or CE # to update 
Status Register 


Standby 
Check SR.? 
1 = Ready, 0 = Busy 


Repeat for subsequent blocks. 


Full status check can be done after each block or after a 
sequence of blocks. 


Write FFH after the last block erase operation to reset the 
device 10 Read Array Mode. 


Bu. 
Command 
Comment. 
Operation 


Standby 
Check SR.3 


1 = Vpp Low Detect 


Standby 
Check SR.4,5 


Both 1 = Command Sequence 
Error 


Standby 
Check SR.5 


1 = Block Erase Error 


SR.3 MUST be cleared, if set during an erase attempt, 
before further attempts are allowed by the Write State 
Machine. 


SR.5 is only cleared by the Clear Status Register 
COmmand, in cases where multiple blocks are erased 
before full status is checked. 


If error is detected, clear the Status Register before 
attempting retry or other error recovery. 


Bus 
Command 
Comments 
Operation 


Write 
Erase 
Data = SOH 


Suspend 


Read 
Status Register Data. 
ToggleOE# 
orCE# 
to 
update Status Register 


Standby 
CheckSR.7 
1 = Ready 


Standby 
Check SR.6 


1 ~ Suspended 


Write 
Read Array 
Data = FFH 


Read 
Read array data from block 
other than that being 
erased. 


Write 
Erase Resume 
Data = DOH 


Figure 15. Erase Suspend/Resume 
Flowchart 


maximum Icc current is 3 mA and typical Icc current 
is 1 mA. The device stays in this static state with 
outputs valid until a new location is read. 
4.5.1 
ACTIVE 
POWER 


With CE# at a logic-low level and RP# at a logic- 
high level, the device is placed in the active mode. 
The device Icc current is a' maximum 60 mA at 
10 MHz with TIL input signals. 


4.5.2 
AUTOMATIC 
POWER 
SAVINGS 


Automatic Power Savings (APS) is a low pwer fea- 
ture during active mode of operation. The 4-~bit 
family of products incorporate Power Reduction 
Control (PRC) circuitry which basically allows the.d~. 
vice to put itself into a low current state when It IS 
not being accessed. After data is read from the 
memory array, PRC logic controls the device's pow- 
er consumption by entering the APS mode where 


4.5.3 
STANDBY 
POWER 


With CE# at a logic-high level (VIH), and the CUI in 
read mode, the memory is placed in standby mode 
where the maximum Icc standby current is 100 !LA 
with CMOS input signals. The standby operation dis- 
ables much of the device's circuitry and substantially 
reduces device power consumption. The outputs 
(00[0:15] 
or 00[0:7]) 
are placed in a high-imped- 


ance state independent of the status of the OE# 
signal. When the 4-Mbit, boot block flash .family is 
deselected during erase or program functions, the 
devices will continue to perform the erase or pro- 
gram function and consume program or erase active 
power until program or erase is completed. 


4.5.4 
RESET/DEEP 
POWER DOWN 


The 4-Mbit boot block flash family supports a typical 
Ice of 0.2 p.Ain deep power-down mode. One of the 
target markets for these devices is in portable equip- 
ment where the power consumption of the machine 
is of prime importance. The 4-Mbit boot block flash 
family has a RP# pin which places the device in the 
deep powerdown mode. When RP# is at a logic-low 
(GND ± 0.2V), all circuits are turned off and the de- 
vice typically draws 0.2 p.A of Vee current. 


During read modes, the RP# pin going low dese- 
lects the memory and places the output drivers in a 
high impedance state. Recovery from the deep pow- 
er-down state, requires a minimum of 400 ns to ac- 
cess valid data (tpHQV). 


During erase or program modes, RP# low will abort 
either erase or program operation. The contents of 
the memory are no longer valid as the data has been 
corrupted by the RP# function. As in the read mode 
above, all internal circuitry is turned off to achieve 
the 0.2 p.A current level. 


RP# transitions to VIL or turning power off to the 
device will clear the status register. 


This use of RP# during system reset is important 
with automated write/erase devices. When the sys- 
tem comes out of reset it expects to read from the 
flash memory. Automated flash memories provide 
status information when accessed during write/ 
erase modes. If a CPU reset occurs with no flash 
memory reset, proper CPU initialization would not 
occur because the flash memory would be providing 
the status information instead of array data. Intel's 
Flash Memories allow proper CPU initialization fol- 
lowing a system reset through the use of the RP# 
input. In this application RP# is controlled by the 
same RESET# signal that resets the system CPU. 


4.6 
Power-up Operation 


The 4-Mbit boot block flash family is designed to 
offer protection against accidental block erasure or 
programming during power transitions. Upon power- 
up the 4-Mbit boot block flash family is indifferent as 
to which power supply, Vpp or Vee, powers-up first. 
Power supply sequencing is not required. 


The 4-Mbit boot block flash family ensures the CUI is 
reset to the read mode on power-up. 


In addition, on power-up the user must either drop 
CE# low or present a new address to ensure valid 
data at the outputs. 


A system designer must guard against spurious 
writes for Vee voltages above VLKO when Vpp is 


active. Since both WE# and CE# must be low for a 
command write, driving either signal to VIHwill inhibit 
writes to the device. The CUI architecture provides 
an added level of protection since alteration of mem- 
ory contents can only occur after successful com- 
pletion of the two-step command sequences. Finally 
the device is disabled until RP# is brought to VIH, 
regardless of the state of its control inputs. This fea- 
ture provides yet another level of memory protec- 
tion. 


Flash memory's power switching characteristics re- 
quire careful device decoupling methods. System 
designers are interested in 3 supply current issues: 


• Standby current levels (Ices) 
• Active current levels (leeR) 
• Transient peaks produced by falling and rising 
edges of CE# . 


Transient current magnitudes depend on the device 
outputs' capacitive and inductive loading. Two-line 
control and proper decoupling capacitor selection 
will suppress these transient voltage peaks. Each 
flash device should have a 0.1 p.Fceramic capacitor 
connected between each Vee and GND, and be- 
tween its Vpp and GND. These high frequency, low- 
inherent inductance capacitors should be placed as 
close as possible to the package leads. 


4.7.1 
Vpp TRACE 
ON PRINTED 
CIRCUIT 
BOARDS 


Writing to flash memories while they reside in the 
target system, requires special consideration of the' 
Vpp power supply trace by the printed circuit board 
designer. The Vpp pin supplies the flash memory 
cells current for programming and erasing. One 
should use similar trace widths and layout consider- 
ations given to the Vee power supply trace. Ade- 
quate Vpp supply traces and decoupling will de- 
crease spikes and overshoots. 


The CUI latches commands as issued by system 
software and is not altered by Vpp or CE# tran- 
sitions or WSM actions. Its state upon power-up, af- 
ter exit from deep power-down mode or after Vee 
transitions below VLKO (Lockout voltage), is Read 
Array mode. 


After any word/byte write or block erase operation is 
complete and even after Vpp transitions down to 
VPPL,the CUI must be reset to Read Array mode via 
the Read Array command when accesses to the 
flash memory are desired. 


ABSOLUTE 
MAXIMUM 
RATINGS· 
NOTICE: 
This data sheet 
contains 
information 
on 


products in the sampling and initial production phases 
Commercial 
Operating 
Temperature 
of development. 
The specifications 
are subject 
to 


During Read 
O·C to 70·C(1) 
change 
without 
notice. 
Verify with your local 
Intel 


During Block 
Erase 
Sales office that you have the latest data sheet be- 


and Word/Byte 
Write 
O·C to 70·C 
L-fo_re_fin_a_li_zl_·n.::,g_a_d_e_s-=ig:....n_. 
--1 
Temperature 
Under Bias 
-1 O·C to + 80·C 
• WARNING: Stressing the device beyond the "Absolute 


Extended 
Operating 
Temperature 
Maximum 
Ratings" 
may 
cause 
permanent 
damage. 


During Read 
- 40·C to + 85·C 
These are stress ratings 
only. Operation 
beyond 
the 


During Block 
Erase 
"Operating 
Conditions" 
is not recommended 
and ex- 


and Word/Byte 
Write 
- 40·C to + 85·C 
tended 
exposure 
beyond 
the 
"Operating 
Conditions" 


Temperature 
Under Bias 
- 40·C to + 85·C 
may affect device reliability. 


Storage 
Temperature 
-65·C 
to + 125·C 


Voltage 
on Any Pin 
(except 
Vcc. 
VPP. Ag and RP#) 


with Respect 
to GND 
- 2.0V to + 7.0V(2) 


Voltage 
on Pin RP# 
or Pin Ag 


with Respect 
to GND 
..... 
- 2.0V to + 13.5V(2, 3) 


Vpp Program 
Voltage 
with Respect 


to GND during Block 
Erase 


and Word/Byte 
Write 
..... 
- 2.0V to + 14.0V(2, 3) 


Vcc 
Supply Voltage 


with Respect 
to GND 
- 2.0V to + 7.0V(2) 


Output Short Circuit Current. 
100 mA(4) 
4 


NOTES: 
1. Operating temperature is for commercial product defined by this specification. 
2. Minimum DC voltage is -0.5V 
on input/output pins. During transitions. this level may undershoot to -2.0V 
for periods 
<20 ns. 
Maximum DC voltage on input/output pins is Vcc + 0.5V which, during transitions. may overshoot to Vcc + 2.0V for 
periods < 20 ns. 
3. Maximum DC voltage on Vpp may overshoot to + 14.0V for periods <20 ns. Maximum DC voltage on RP# or Ae may 
overshoot to 13.5V for periods < 20 ns. 
4. Output shorted for no more than one second. No more than one output shorted at a time. 
5. 10% Vcc 
specifications reference the 2BF400BX-60/2BF004BX-60 in their standard test configuration, and the 
2BF400BX-BO/2BF004BX-BO. 
6. 5% Vcc specifications reference the 2BF400BX-6Q/2BF004BX-60in their high speed test configuration. 


Symbol 
Parameter 
Notes 
Mln 
Max 
Units 


TA 
Operating 
Temperature 
0 
70 
·C 


Vcc 
Vcc Supply Voltage 
(10%) 
5 
4.50 
5.50 
V 


Vcc 
Vcc Supply Voltage 
(5%) 
6 
4.75 
5.25 
V 


Symbol 
Parameter 
Notes 
Mln 
Typ 
Max 
Unit 
Test Condition 


III 
Input Load Current 
1 
±1.0 
/LA 
Vcc = VccMax 
VIN = Vcc or GND 


ILO 
Output Leakage Current 
1 
±10 
/LA 
VCC = VCCMax 
VOUT = VCC or GND 


intel~ 


Symbol 
Parameter 
Notes 
Mln 
Typ 
Max 
Unit 
Test Conditions 


Ices 
Vee Standby 
Current 
1,3 
1.5 
mA 
Vee = VccMax 
CE# 
= RP# = VIH 


100 
,..,A Vee = VeeMax 


CE# 
= RP# = Vee ±0.2V 


28F400BX: 
BYTE# 
= Vee 
±0.2VorGND 


IceD 
Vee Deep Powerdown 
Current 
1 
0.20 
1.2 
,..,A RP# 
= GND ±0.2V 


leeR 
Vee Read Current for 
1,5, 
20 
55 
mA 
Vee = Vee Max, CE# 
= GND 


28F400BX 
Word-Wide 
6 
f = 10 MHz, lOUT = 0 mA 
and By1e-Wide Mode 
CMOS Inputs 
and 28F004BX 
20 
60 
mA 
Vee = Vee Max, CE# 
= VIL 
By1e-Wide Mode 
f = 10 MHz, lOUT = 0 mA 
TIL 
Inputs 


leew 
Vcc Word/By1e 
Write Current 
1,4 
65 
mA 
Word or By1e Write in Progress 


IeeE 
Vee Block Erase Current 
1,4 
30 
mA 
Block Erase in Progress 


leeES 
Vee Erase Suspend 
Current 
1,2 
5 
10 
mA 
Block Erase Suspended, 
CE# 
= VIH 


IpPS 
Vpp Standby Current 
1 
±15 
,..,A Vpp"';; Vee 


IpPO 
Vpp Deep PowerDown 
Current 
1 
5.6 
,..,A RP# = GND ±0.2V 


IpPR 
Vpp Read Current 
1 
200 
,..,A Vpp> 
Vee 


Ippw 
Vpp Word Write Current 
1 
40 
mA 
Vpp = VpPH 
Word Write in Progress 


Ippw 
Vpp By1e Write Current 
1 
30 
mA 
Vpp = VPPH 
By1e Write in Progress 


IpPE 
Vpp Block Erase Current 
1 
30 
mA 
Vpp = VPPH 
Block Erase in Progress 


IpPES 
Vpp Erase Suspend 
Current 
1 
200 
,..,A Vpp = VPPH 
Block Erase Suspended 


IRP# 
RP# 
Boot Block Unlock 
1,4 
500 
,..,A RP# 
= VHH 
Current 


110 
Ag Intelligent 
Identifier 
Current 
1,4 
500 
,..,A Ag = VIO 


VIO 
Aglntelligent 
Identifier 
Voltage 
11.5 
13.0 
V 


VIL 
Input Low Voltage 
-0.5 
0.8 
V 


VIH 
Input High Voltage 
2.0 
Vee + 0.5 
V 


VOL 
Output 
Low Voltage 
0.45 
V 
Vee = VeeMin 
IOL = 5.8mA 
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Symbol 
Parameter 
Notes 
Mln 
Typ 
Max 
Unit 
Test Conditions 


VOH 
Output High Voltage 
2.4 
V 
Vcc = VccMin 
IOH = -2.5 
mA 


VPPL 
Vpp during Normal Operations 
3 
0.0 
6.5 
V 


VPPH 
Vpp during Erase/Write 
Operations 
7 
11.4 
12.0 
12.6 
V 


VPPH 
Vpp during Erase/Write 
Operations 
8 
10.8 
12.0 
13.2 
V 


VLKO 
Vcc Erase/Write 
Lock Voltage 
2.0 
V 


VHH 
RP# 
Unlock Voltage 
11.5 
13.0 
V 
Boot Block Write/Erase 


Symbol 
Parameter 
Notes 
Mln 
Max 
Unit 


TA 
Operating 
Temperature 
-40 
85 
·C 


Vcc 
Vcc Supply Voltage 
(10%) 
5 
4.50 
5.50 
V 


Symbol 
Parameter 
Notes 
Mln 
Typ 
Max 
Unit 
Test Conditions 


III 
Input Load Current 
1 
±1.0 
p.A 
Vcc = VccMax 
VIN = Vcc or GND 


ILa 
Output Leakage 
Current 
1 
±10 
p.A 
Vcc = VccMax 
VOUT = VccorGND 


Iccs 
Vcc Standby 
Current 
1,3 
1.5 
mA 
Vcc = VccMax 
CE# 
= RP# = VIH RP# 


100 
p.A 
Vcc = VccMax 
CE# 
= RP# = Vcc 
±0.2V 
28F400BX: 
BYTE# 
= Vcc 
±0.2Vor 
GND 


ICCD 
Vcc Deep Power-Down 
Current 
1 
0.20 
8 
p.A 
RP# 
= GND ±0.2V 
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Symbol 
Parameter 
Notes 
Mln 
Typ 
Max 
Unit 
Test Conditions 


leeR 
Vee Read Current for 28F400BX 
1,5, 
60 
mA 
Vce = Vec Max, CE# 
= GND 


Word-Wide 
and Byte-Wide 
Mode 
6 
f = 10 MHz, lOUT = 0 mA 


28F004BX 
Byte-Wide 
Mode 
CMOS Inputs 


65 
mA 
Vee = Vec Max, CE# 
= VIL 


f = 10 MHz,lOUT = 0 mA 
TTL Inputs 


leew 
Vec Word Write Current 
1 
70 
mA 
Word Write in Progress 


IeeE 
Vec Block Erase Current 
1 
40 
mA 
Block Erase in Progress 


leeES 
Vec Erase Suspend 
Current 
1,2 
5 
10 
mA 
Block Erase Suspended, 


CE# 
= VIH 


IpPS 
Vpp Standby Current 
1 
±15 
""A 
Vpp ~ Vee 


IpPD 
Vee Deep Power-Down 
Current 
1 
5.0 
""A 
RP# 
= GND 
±0.2V 


IpPR 
Vpp Read Current 
1 
200 
""A 
Vpp> 
Vcc 


Ippw 
Vpp Word Write Current 
1 
40 
mA 
Vpp = VPPH 
Word Write in Progress 


Ippw 
Vpp Byte Write Current 
1 
30 
mA 
Vpp = VPPH 
Byte Write in Progress 


Symbol 
Parameter 
Notes 
Mln 
Typ 
Max 
Unit 
Test Conditions 


IpPE 
Vpp Block Erase Current 
1 
30 
mA 
Vpp = VPPH 
Block Erase in Progress 


IpPES 
Vpp Erase Suspend 
Current 
1 
200 
p.A 
Vpp = VPPH 
Block Erase Suspended 


IRP# 
RP# 
Boot Block Unlock 
1,4 
500 
p.A 
RP# = VHH 
Current 


110 
Ag Intelligent 
Identifier Current 
1 
500 
p.A 
Ag = VIO 


VIO 
Ag Intelligent 
Identifier Current 
11.5 
13.0 
V 


VIL 
Input Low Voltage 
-0.5 
0.8 
V 


VIH 
Input High Voltage 
2.0 
Vcc + 0.5 
V 


VOL 
Output 
Low Voltage 
0.45 
V 
Vcc = VccMin 
IOL = 5.8mA 


VOH 
Output High Voltage 
2.4 
V 
Vcc = VccMin 
IOH = -2.5 
mA 


VPPL 
Vpp during Normal Operations 
3 
0.0 
6.5 
V 


VPPH 
Vpp during Erase/Write 
Operations 
7 
11.4 
12.0 
12.6 
V 


VPPH 
Vpp during Erase/Write 
Operations 
8 
10.8 
12.0 
13.2 
V 


VLKO 
Vcc Erase/Write 
Lock Voltage 
2.0 
V 


VHH 
RP# 
Unlock Voltage 
11.5 
13.0 
V 
Boot Block Write/Erase 


Symbol 
Parameter 
Typ 
Max 
Unit 
Conditions 


CIN 
Input Capacitance 
6 
8 
pF 
VIN = OV 


COUT 
Output Capacitance 
10 
12 
pF 
VOUT = OV 


NOTES: 
1. All currents 
are in RMS unless 
otherwise 
noted. 
Typical 
values 
at VCC = 5.0V, VPP = 12.0V, T = 25·C. These 
currents 
are valid for all product 
versions 
(packages 
and speeds). 
2. ICCES is specified 
with the device 
deselected. 
If the device 
is read while in Erase Suspend 
Mode, 
current 
draw is the sum 
of ICCES and ICCR. 
3. Block 
Erases 
and Word/Byte 
Writes 
are inhibited 
when 
VPP = VPPL and not guaranteed 
in the range 
between 
VPPH and 
VPPL· 
4. Sampled, 
not 100% 
tested. 


5. Automatic 
Power 
Savings 
(APS) reduces 
ICCR to less than 
1 mA typical 
in static 
operation. 


6. CMOS 
Inputs are either 
VCC ±0.2V 
or GNO 
±0.2V. 
TTL Inputs are either VIL or VIH. 
7. VPP = 12.0V 
± 5% for applications 
requiring 
100,000 
block 
erase cycles. 
8. VPP = 12.0V 
± 
10% for applications 
requiring 
wider VPP tolerances 
at 100 block 
erase cycles. 
g. For the 28F004BX 
address 
pin A10 follows 
the COUT capacitance 
numbers. 
10. ICCR typical 
is 25 mA for X16 Active 
Read Current. 


STANDARD 
AC INPUT/OUTPUT 
REFERENCE 
WAVEFORM 
STANDARD 
AC TESTING 
LOAD 
CIRCUIT 


INPUT 2.0> TESTPOINTS< 
0.8 


290451-14 


AC 
test 
inputs 
are 
driven 
at 
VOH 
(2.4 
VnLl 
for 
a 
Logic 
"1" 
and 
VOL 
(0.45 
VnLl 
for 
a logic 
"0". 
Input 
timing 
begins 
at VIH (2.0 VnLl 
and 
VIL 


(0.8 VnLl. 
Output 
timing 
ends at VIH and VIL. Input rise and fall times 
(10% 
to 90%) 
< 10 ns. 


CL = 100 pF 
CL Includes 
Jig Capacitance 


RL = 3.3 Kfi 


HIGH SPEED 
AC INPUT/OUTPUT 
REFERENCE 
WAVEFORM 
HIGH SPEED 
AC TESTING 
LOAD CIRCUIT 


3.0 --IN-P-UT"'Xl.S_TESTI~INTS- 
Xl.S 
OUTPUT 


0.0 
II 
290451-22 


AC test 
inputs 
are driven 
at 3.0V for a Logic 
"1" 
and O.OV for a logic 
"0". 


Input timing 
begins. 
and output 
timing 
ends. at 1.5V. Input rise and fall times 


(10% 
to 90%) < 10 ns. 


CL = 30 pF 
CL Includes 
Jig Capacitance 


RL = 3.3 Kfi 


NOTES: 
1. Testing 
characteristics 
for 28F400BX-60/28F004BX-60 
in standard 
test configuration 
and 28F400BX·80/28F004BX-80. 


2. Testing 
characteristics 
for 28F400BX·60/28F004BX-60 
in high speed test configuration. 


Vcc 
± 5% 
28F400BX-60(4) 
28F004BX-60(4) 


Versions 


Vcc 
± 10% 
28F400BX-60(5) 
28F400BX·80(5) 
Unit 


28F004BX·60(5) 
28F004BX·80(5) 


Symbol 
Parameter 
Notes 
Min 
Max 
Mln 
Max 
Min 
Max 


tAVAV tRC 
Read Cycle Time 
60 
70 
80 
ns 


tAVQV tACC Address 
to 
60 
70 
80 
ns 
Output Delay 


tELQV teE 
CE # to Output Delay 
2 
60 
70 
80 
ns 


tpHQV tpWH RP# 
High to 
300 
300 
300 
ns 
Output Delay 


tGLQV toE 
OE # to Output Delay 
2 
30 
35 
40 
ns 


tELQX tLZ 
CE # to Output Low Z 
3 
0 
0 
0 
ns 


tEHQZ tHZ 
CE # High to Output 
3 
20 
25 
30 
ns 
HighZ 


tGLQX toLZ 
OE # to Output Low Z 
3 
0 
0 
0 
ns 


tGHQZ tDF 
OE # High to Output 
3 
20 
25 
30 
ns 
HighZ 


toH 
Output Hold from 
3 
0 
0 
0 
ns 
Addresses, 
CE # or OE # Change, 
Whichever 
is First 


tELFL 
CE# 
to BYTE # 
3 
5 
5 
5 
ns 


tELFH 
Switching 
Low or High 


tFHQV 
BYTE # Switching 
3,6 
60 
70 
80 
ns 
High to Valid 
Output Delay 


tFLQZ 
BYTE # Switching 
3 
20 
25 
30 
ns 
Low to 
Output High Z 


NOTES: 
1. See AC Input/Output Reference Waveform for timing measurements. 
2. OE# may be delayed up to teE-toE after the falling edge of CEll' without impact on tCE. 
3. Sampled, not 100% tested. 
4. See High Speed Test Configuration. 
5. See Standard Test Configuration. 
6. tFLOV,BYTE# switching low to valid output delay, will be equal to tAVOV,measured from the time DQ1S/A.1 becomes 
valid. 


• 
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EXTENDED 
TEMPERATURE 
OPERATION 
AC CHARACTERISTICS-Read 
Only Operations(1) 


Versions 
T28F400BX·80(4) 


T28FOO4BX·80 
Unit 


Symbol 
Parameter 
Notes 
Min 
Max 


tAVAV 
tRC 
Read Cycle Time 
80 
ns 


tAVQV 
tACC 
Address 
to 
80 
ns 
Output Delay 


tELQV 
teE 
CE # to Output Delay 
80 
ns 


tpHQV 
tpWH 
RP# 
High to 
300 
ns 
Output Delay 


tGLQV 
toE 
OE # to Output Delay 
2 
40 
ns 


tELQX 
tLZ 
CE # to Output Low Z 
0 
ns 


tEHQZ 
tHZ 
CE # High to Output 
30 
ns 
HighZ 


tGLQX 
toLZ 
OE # to Output Low Z 
3 
0 
ns 


tGHQZ 
tDF 
OE # High to Output 
3 
30 
ns 
HighZ 


toH 
Output Hold from 
3 
0 
ns 
Addresses, 
CE # or OE # Change, 
Whichever 
is First 


tELFL 
CE# 
to BYTE# 
3 
5 
ns 


tELFH 
Switching 
Low or High 


tFHQV 
BYTE # Switching 
3,5 
80 
ns 
High to Valid 
Output Delay 


tFLQZ 
BYTE # Switching 
3 
30 
ns 
Low to 
Output High Z 


NOTES: 
1. See AC Input/Output Reference Waveform for timing measurements. 
2. OEiI' may be delayed up to icE-toE after the falling edge of CEil' without impact on icE. 
3. Sampled, not 100% tested. 
4. See Standard Test Configuration. 
5. tFLav, BYTEii' switching low to valid output delay, will be equal to tAvav from the time DQ15/A-1 becomes valid. 
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Figure 17. Ice (RMS) va Frequency 
(Vcc = 5.5V for x16 Operation 
Figure 18. Ice (RMS) va Frequency 
(Vcc = 5.5V) for x8 Operation 
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Vcc ± 5% 
28F400BX-60(9) 
28F004BX-60(9) 
Versions 


Vcc 
± 10% 
28F400BX-60(10) 
28F400BX-80(10) 
Unit 
28F004BX-60(10) 
28F004BX-80(10) 


Symbol 
Parameter 
Notes 
Mln 
Max 
Mln 
Max 
Mln 
Max 


tAVAV 
tWG 
Write Cycle Time 
60 
70 
80 
ns 


tpHwL 
tps 
AP'* 
High 
215 
215 
215 
ns 
Aecoveryto 
WE'* 
Going Low 


tELWL 
tes 
CE'* 
Setup to WE '* 
0 
0 
0 
ns 


Going Low 


tpHHWH tpHS 
AP'* 
VHH Setup to 
6,8 
100 
100 
100 
ns 


WE,* 
Going High 


tVPWH 
tvps 
Vpp Setup to WE'* 
5,8 
100 
100 
100 
ns 


Going High 


tAVWH 
tAS 
Address 
Setup to 
3 
50 
50 
50 
ns 


WE'* 
Going High 


tOVWH 
tos 
Data Setup to WE # 
4 
50 
50 
50 
ns 


Going High 


tWLWH 
twP 
WE # Pulse Width 
50 
50 
50 
ns 


tWHOX 
tOH 
Data Hold from 
4 
0 
0 
0 
ns 


WE'* 
High 


tWHAX 
tAH 
Address 
Hold from 
3 
10 
10 
10 
ns 


WE# 
High 


tWHEH 
teH 
CE # Hold from 
10 
10 
10 
ns 


WE# 
High 


tWHWL 
tWPH WE# 
Pulse 
10 
20 
30 
ns 


Width High 


tWHOV1 
Duration of 
2,5 
6 
6 
6 
JLs 


Word/Byte 
Programming 
Operation 


tWHOV2 
Duration of Erase 
2,5,6 
0.3 
0.3 
0.3 
s 


Operation 
(Boot) 


tWHOV3 
Duration of Erase 
2,5 
0.3 
0.3 
0.3 
s 


Operation 
(Parameter) 


tWHOV4 
Duration of Erase 
2,5 
0.6 
0.6 
0.6 
s 
Operation 
(Main) 


taWL 
tVPH 
Vpp Hold from 
5,8 
0 
0 
0 
ns 


Valid SAD 


taVPH 
tpHH 
AP# 
VHH Hold 
6,8 
0 
0 
0 
ns 


from Valid SAD 


tpHBR 
Boot-Block 
7,8 
100 
100 
100 
ns 


Aelock 
Delay 
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NOTES: 
1. Read timing 
characteristics 
during 
write 
and erase 
operations 
are the same 
as during 
read-only 
operations. 
Refer 
to AC 
characteristics 
during 
Read Mode. 
2. The on-chip 
WSM 
completely 
automates 
program/erase 
operations; 
program/erase 
algorithms 
are now controlled 
inter- 
nally which 
includes 
verify 
and margining 
operations. 


3. Refer to command 
definition 
table for valid AIN. 
4. Refer to command 
definition 
table for valid DIN. 
5. Program/Erase 
durations 
are measured 
to valid SRD data (successful 
operation, 
SR.7 = 1). 


6. For Boot Block 
Program/Erase, 
RP# 
should 
be held at VHH until operation 
completes 
successfully. 
7. Time tpHBR is required 
for successful 
relocking 
of the Boot Block. 
6. Sampled 
but not 100% 
tested. 
9. See High Speed 
Test Configuration. 
10. See Standard 
Test Configuration. 


28F400BX·60 
28F400BX·80 


Parameter 
Notes 
28FOO4BX·60 
28FOO4BX-80 
Unit 


Mln 
Typ(1) 
Max 
Mln 
Typ(1) 
Max 


Boot/ Parameter 
2 
1.0 
7 
1.0 
7 
s 
Block Erase Time 


Main Block 
2 
2.4 
14 
2.4 
14 
s 
Erase Time 


Main Block Byte 
2 
1.2 
4.2 
1.2 
4.2 
s 
Program Time 


Main Block Word 
2 
0.6 
2.1 
0.6 
2.1 
s 
Program Time 


NOTES: 
1. 25°C 
2. Excludes 
System-Level 
Overhead. 


28F400BX-60 
28F400BX·80 


Parameter 
Notes 
28FOO4BX-60 
28FOO4BX·80 
Unit 


Mln 
Typ(1) 
Max 
Mln 
Typ(1) 
Max 


Boot/Parameter 
2 
5.8 
40 
5.8 
40 
s 
Block Erase Time 


Main Block 
2 
14 
60 
14 
60 
s 
Erase Time 


Main Block Byte 
2 
6.0 
20 
6.0 
20 
s 
Program Time 


Main Block Word 
2 
3.0 
10 
3.0 
10 
s 
Program Time 


NOTES: 
1. 25°C 
2. Excludes 
System-Level 
Overhead. 


EXTENDED 
TEMPERATURE 
OPERATION 
AC CHARACTERISTICS-WE 
# Controlled 
Write Operations(1) 


Versions(4) 
T28F400BX-80(9) 
T28FOO4BX·80(9) 
Unit 


Symbol 
Parameter 
Notes 
Min 
Max 


tAVAV 
tWG 
Write Cycle Time 
80 
ns 


tpHwl 
tps 
RP# 
High Recovery 
to 
220 
ns 
WE # Going Low 


tElWl 
tes 
CE # Setup to WE # Going Low 
0 
ns 


tpHHWH 
tpHS 
RP# 
VHH Setup to WE# 
6,8 
100 
ns 
Going High 


tVPWH 
tvps 
Vpp Setup to WE # Going High 
5,8 
100 
ns 


tAVWH 
tAS 
Address 
Setup to WE # 
3 
60 
ns 
Going High 


tovwH 
tos 
Data Setup to WE # Going High 
4 
60 
ns 


tWlWH 
twP 
WE # Pulse Width 
60 
ns 


tWHOX 
tOH 
Data Hold from WE # High 
4 
0 
ns 


tWHAX 
tAH 
Address 
Hold from WE # High 
3 
10 
ns 


tWHEH 
teH 
CE # Hold from WE # High 
10 
ns 


tWHWl 
tWPH 
WE # Pulse Width High 
20 
ns 


tWHOV1 
Duration of Word/Byte 
2,5 
7 
p..s 


Programming 
Operation 


tWHOV2 
Duration of Erase Operation 
(Boot) 
2,5,6 
0.4 
s 


tWHOV3 
Duration of Erase Operation 
2,5 
0.4 
s 
(Parameter) 


tWHOV4 
Duration of Erase Operation 
(Main) 
2,5 
0.7 
s 


tOWl 
tVPH 
Vpp Hold from Valid SRD 
5,8 
0 
ns 


taVPH 
tpHH 
RP# 
VHH Hold from Valid SRD 
6,8 
0 
ns 


tpHBR 
Boot-Block 
Relock Delay 
7,8 
100 
ns 


NOTES: 
1. Read timing 
characteristics 
during 
write 
and erase 
operations 
are the same 
as during 
read-only 
operations. 
Refer 
to AC 
characteristics 
during 
Read Mode. 
2. The on-chip 
WSM 
completely 
automates 
program/erase 
operations; 
program/erase 
algorithms 
are now controlled 
inter- 
nally which 
includes 
verify and margining 
operations. 


3. Refer to command 
definition 
table for valid AIN. 
4. Refer to command 
definition 
table for valid DIN. 


5. Program/Erase 
durations 
are measured 
to valid SRD data (successful 
operation, 
SR.7 = 1). 


6. For Boot Block 
Program/Erase, 
RP# 
should 
be held at VHH until operation 
completes 
successfully. 
7. Time tpHBR is required 
for successful 
relocking 
of the Boot Block. 
8. Sampled 
but not 100% 
tested. 
9. See Standard 
Test Configuration. 


EXTENDED 
TEMPERATURE 
OPERATION 
BLOCK 
ERASE 
AND WORD/BYTE 
WRITE 
PERFORMANCE 
Vpp = 12.0V ± 5% 


T28F400BX·80 


Parameter 
Notes 
T28FOO4BX-80 
Unit 


Min 
Typ(1) 
Max 


Boot! Parameter 
2 
1.5 
10.5 
s 
Block Erase Time 


Main Block 
2 
3.0 
18 
s 
Erase Time 


Main Block Byte 
2 
1.4 
5.0 
s 
Program Time 


Main Block Word 
2 
0.7 
2.5 
s 
Program Time 


NOTES: 
1. 25"C 
2. Excludes 
System-Level 
Overhead. 


f" 


""" 
""" 
VCC POWER-UP 


'" 
STANDBY 


"TI 
VIH 
iFi 
ADDRESSES 
(A) 
C..• 
V1L 
II 
N 
:-" 
~ 
V1H 
0 
CEO 
(E) 
~ 
III 
VIL 
<II- 
0 
VIH 
..• 
3III 
OEM (G) 
- 
0 
V1L 
..• 
III 
~ 
V1H 
:!.- 
II 
WE' 
(W) 


III 


VIL 
:J 
Q, 
m..• 
IIIIII 
II 
VIH 
0 
'0 
DATA 
(0/0) 
II 
~ 
..• 
VIL 
! 
l§1 
0" 
~ 
:JIII 
~ i 
VHH 
© 
m 
'lIo 
6.SV 
liiiiI 
(-) 
VIH 
= 
0 
RP' 
(p) 
~ 
:J- 
'1iiJ 
..• 
VIL 
2- 


© 
ii 


~ 


Q, 


VpPH 
~ 
~:!. 


~ 
iD 
V 
(V) 
VpPL 
~ 
.!. 
PP 
VIH 
=© 
VIL 
~ 


WRITE 
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PROGRA~ 
OR 
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PROGRA~ 


ERASE 
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CO~~AND 
OR ERASE 
CONFlR~ 
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OR ERASE 
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Vcc 
± 5% 
2SF400BX-60(10) 
2SFOO4BX-60(10) 
Versions 


Vcc 
±10% 
2SF400BX-60(11) 
2SF400BX·S0(11) 
Unit 
2SFOO4BX-60(11) 
2SFOO4BX-SO(11) 


Symbol 
Parameter 
Notes 
Mln 
Max 
Mln 
Max 
Mln 
Max 


tAVAV 
twc 
Write Cycle Time 
60 
70 
80 
ns 


tpHEL 
tps 
RP# 
High 
215 
215 
215 
ns 
Recovery 
to CE # Going Low 


tWLEL 
tws 
WE# 
Setup to 
0 
0 
0 
ns 
CE # Going Low 


tpHHEH tpHS 
RP# 
VHH Setup to 
6,8 
100 
100 
100 
ns 
CE# 
Going High 


tVPEH 
tvps 
Vpp Setup to CE # 
5,8 
100 
100 
100 
ns 
Going High 


tAVEH 
tAS 
Address 
Setup to 
3 
50 
50 
50 
ns 
CE # Going High 


tOVEH 
tos 
Data Setup to 
4 
50 
50 
50 
ns 
CE # Going High 


tELEH 
tep 
CE # Pulse Width 
50 
50 
50 
ns 


tEHOX 
tOH 
Data Hold from 
4 
0 
0 
0 
ns 
CE# 
High 


tEHAX 
tAH 
Address 
Hold 
3 
10 
10 
10 
ns 
from CE # High 


tEHWH 
tWH 
WE # Hold from 
10 
10 
10 
ns 
CE# 
High 


tEHEL 
tePH 
CE# 
Pulse 
10 
20 
30 
ns 
Width High 


tEHOV1 
Duration 
of Word/ 
2,5 
6 
6 
6 
/-Ls 
Byte Programming 
Operation 


tEHOV2 
Duration of Erase 
2,5,6 
0.3 
0.3 
0.3 
s 
Operation 
(Boot) 


tEHOV3 
Duration of Erase 
2,5 
0.3 
0.3 
0.3 
s 
Operation 
(Parameter) 


tEHOV4 
Duration of Erase 
2,5 
0.6 
0.6 
0.6 
s 
Operation 
(Main) 


taWL 
tVPH Vpp Hold from 
5,8 
0 
0 
0 
ns 
ValidSRD 


taVPH 
tpHH 
RP# 
VHH Hold 
6,8 
0 
0 
0 
ns 
from Valid SRD 


tpHBR 
Boot-Block 
7 
100 
100 
100 
ns 
Relock Delay 


NOTES: 
1. Chip-Enable Controlled Writes: Write operations are driven by the valid combination of CEII and WEII in systems where 
CEil defines the write pulse-width (within a longer WEll timing waveform), all set-up, hold and inactive WEll times should 
be measured relative to the CEII waveform. 
2,3,4,5,6,7,8: 
Refer to AC Characteristics notes for WE#-Controlled Write Operations. 
9. Read timing characteristics during write and erase operations are the same as during read-only operations. Refer to AC 
Characteristics during Read Mode. 
10. See High Speed Test Configuration. 
11. See Standard Test Configuration. 


EXTENDED 
TEMPERATURE 
OPERATION 
AC CHARACTERISTIC5-CE#-CONTROLLED 
WRITE 
OPERATIONS(1,9) 


Versions 
T28F400BX-80(10) 
T28FOO4BX-8l)(10) 
Unit 
Symbol 
Parameter 
Notes 
Mln 
Max 


tAVAV 
twc 
Write Cycle Time 
80 
ns 


tpHEL 
tps 
RP# 
High Recovery 
to CE# 
Going Low 
220 
ns 


tWLEL 
tws 
WE # Setup to CE # Going Low 
0 
ns 


tpHHEH 
tpHS 
RP# 
VHH Setup to CE# 
Going High 
6,8 
100 
ns 


tVPEH 
tvps 
Vpp Setup to CE# 
Going High 
5,8 
100 
ns 


tAVEH 
tAS 
Address 
Setup to CE # Going High 
3 
60 
ns 


tOVEH 
tos 
Data Setup to CE # Going High 
4 
60 
ns 


tELEH 
tep 
CE # Pulse Width 
60 
ns 


tEHOX 
tOH 
Data Hold from CE # High 
4 
0 
ns 


tEHAX 
tAH 
Address 
Hold from CE # High 
3 
10 
ns 


tEHWH 
tWH 
WE # Hold from CE # High 
10 
ns 


tEHEL 
tePH 
CE # Pulse Width High 
20 
ns 


tEHOV1 
Duration of Word/Byte 
Programming 
2,5 
7 
ILs 
Operation 


tEHOV2 
Duration of Erase Operation 
(Boot) 
2,5,6 
0.4 
s 


tEHOV3 
Duration of Erase Operation 
(Parameter) 
2,5 
0.4 
s 


tEHOV4 
Duration of Erase Operation 
(Main) 
2,5 
0.7 
s 


taWL 
tVPH 
Vpp Hold from Valid SRD 
5,8 
0 
ns 


taVPH 
tpHH 
RP# 
VHH Hold from Valid SRD 
6,8 
0 
ns 


tpHBR 
Boot-Block 
Relock Delay 
7 
100 
ns 


NOTES: 
1. Chip-Enable Controlled Writes: Write operations are driven by the valid combination of CEII and WEII in systems where 
CEil defines the write pulse-width (within a longer WEll timing waveform), all set-up, hold and inactive WEll times should 
be measured relative to the CE# waveform. 
2,3,4,5,6,7,8: 
Refer to AC Characteristics for WEll-Controlled Write Operations. 
9. Read timing characteristics during write and erase operations are the same as during read-only operations. Refer to AC 
Characteristics during Read Mode. 
10. See Standard Test Configuration. 
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WRITE 


WRITE 
PROGRAM 
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VALID 
ADDRESS 
&: DATA (PROGRAM) 
AUTOMATED 
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ERASE 
SETUP 
COMMAND 
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CONFIRM 
COMMAND 
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intel~ 
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OPERATING 
TEMPERATURE 
PACKAGE 
T 
= EXTENDED 
TEMP 
E 
= STANDARD 
56 
LEAD TSOP 
BLANK = COMMERCIAL 
TEMP 
PA = U LEAD 
PSOP 


TB = 44 
LEAD 
PSOP. 
EXTENDED 
TEMP 


~ 
ACCESS 
SPEED (ns) 


60 ns 
80 ns 


VALID 
COMBINATIONS: 
E28F400BX-T60 
PA28F400BX-T60 
E28F400BX-B60 
PA28F400BX-B60 
E28F400BX-T80 
PA28F400BX-T80 
E28F400BX-B80 
PA28F400BX-B80 
TE28F400BX-T80 
TE28F400BX-B80 
TB28F400BX-T80 
TB28F400BX-B80 


~------~, 
L..-J 
I 
I 


OPERATING 
TEMPERATURE 
PACKAGE 


T 
= EXTENDED 
TEMP 
E 
= STANDARD 
40 
LEAD 
TSOP 
BLANK 
= COMMERCIAL 
TEMP 
L 
ACCESS 
SPEED (ns) 


60 ns 
BO ns 


VALID 
COMBINATIONS: 
E28F004BX-T60 
E28F004BX-T80 
E28F004BX-B60 
E28F004BX-B80 


ADDITIONAL 
INFORMATION 
28F200BX/28F002BX 
Datasheet 


28F200BXL/28F002BXL 
Datasheet 


28F400BXLl28F004BXL 
Datasheet 


Order 
Number 
290448 


290449 


290450 


AP-363 
"Extended 
Flash BIOS Design for Portable 
Computers" 


ER-28 "ETOX-1I1 Flash Memory Technology" 


ER-29 "The 
InteI2/4-MBit 
Boot Block Flash Memory 
Family" 


292098 


204012 


294013 


Number 
Description 


-001 
Original Version 


-002 
Removed 
-70 speed bin. 
Integrated 
-70 characteristics 
into ·60 speed bin. 
Added Extended 
Temperature 
characteristics. 
Modified 
BYTE II Timing Diagram. 


-003 
PWD renamed 
to RPII 
for JEDEC standardization 
compatibility. 


Combined 
Vcc Read current for 28F400BX 
Word-Wide 
Mode and Byte-Wide 
Mode and 
28F004BX 
Byte-Wide 
Mode in DC Characteristics 
tables. 
Added Boot Black Unlock Current specifications 
in DC Characteristics 
tables. 


Improved 
ICCRand Iccw 
in DC Characteristics: 
Extended 
Temperature 
Operation 
table. 


Improved 
tAVAV. tAVQV. tELQV. t(;LQV. tEHQZ. t(;HQZ. tFHQV and tFLQZ specifications 
for 
Extended 
Temperature 
Operations 
AC Characteristics-Read 
and Write Operations. 


28F400BX- TL/BL, 28F004BX- TL/BL 
4-MBIT (256K x 16, 512K x 8) LOW POWER BOOT BLOCK 
FLASH MEMORY FAMILY 


• 
Low Voltage Operation for Very Low 
Power Portable Applications 
-Vee 
= 3.3V ±0.3V 


• 
x8/x16 Input/Output 
Architecture 
- 
28F400BX-TL, 28F400BX-BL 
- 
For High Performance and High 
Integration 
16-bit and 32-bit CPUs 


• 
x8-only Input/Output 
Architecture 
- 
28F004BX-TL, 28F004BX-BL 
- 
For Space Constrained 8-bit 
Applications 


• 
Optimized High Density Blocked 
Architecture 
- 
One 16-KB Protected Boot Block 
- 
Two 8-KB Parameter Blocks 
- 
One 96-KB Main Block 
- 
Three 128-KB Main Blocks 
- 
Top or Bottom Boot Locations 


• 
Extended Cycling Capability 
- 
10,000 Block Erase Cycles 


• 
Automated 
Word/Byte 
Write and Block 
Erase 
- 
Command User Interface 
- 
Status Registers 
- 
Erase Suspend Capability 


• 
SRAM-Compatlble Write Interface 


• 
Automatic 
Power Savings Feature 


- 
0.8 mA typical lee Active Current in 
Static Operation 


• 
Very High-Performance 
Read 


-150 
ns Maximum Access Time 


- 
65 ns Maximum Output Enable Time 


• 
Low Power Consumption 
- 
15 mA Typical Active Read Current 


• 
Reset/Deep 
Power·Down Input: 


- 
0.2 /-LAlee Typical 
- 
Acts as Reset for Boot Operations 


• 
Write Protection 
for Boot Block 


• 
Hardware Data Protection 
Feature 


- 
Erase/Write 
Lockout During Power 


Transitions 


• 
Industry Standard Surface Mount 
Packaging 
- 
28F400BX: JEDEC ROM 
• 


Compatible 
44-Lead PSOP 
56·Lead TSOP 
- 
28F004BX: 40-Lead TSOP 


• 
12V Word/Byte 
Write and Block Erase 


- 
Vpp = 12V ± 5% Standard 


• 
ETOX III Flash Technology 
-3.3V 
Read 


Intel's 
4-Mbit 
Low Power Flash Memory 
Family is an extension 
of the Boot Block Architecture 
which 
includes 


block-selective 
erasure, 
automated 
write 
and erase 
operations 
and standard 
microprocessor 
interface. 
The 


4-Mbit 
Low Power 
Flash Memory 
Family enhances 
the Boot Block Architecture 
by adding 
more density 
and 


blocks, 
x8/x16 
input/output 
control, 
very low power, very high speed, 
an industry 
standard 
ROM compatible 


pinout and surface 
mount packaging. 
The 4-Mbit low power flash family opens a new capability 
for 3V battery- 


operated 
portable 
systems 
and is an easy upgrade 
to Intel's 
2-Mbit 
Low Power 
Boot 
Block 
Flash 
Memory 


Family. 


The Intel 28F400BX- TL/BL 
are 16-bit wide low power flash memory offerings. 
These high density flash memo- 
ries 
provide 
user 
selectable 
bus operation 
for 
either 
8-bit 
or 16-bit 
applications. 
The 
28F400BX-TL 
and 


28F400BX-BL 
are 4,194,304-bit 
non-volatile 
memories 
organized 
as either 524,288 
bytes or 262,144 
words of 
information. 
They are offered 
in 44-Lead 
plastic 
SOP and 56-Lead 
TSOP packages. 
The x8/x16 
pinout 
con- 
forms 
to the industry 
standard 
ROM/EPROM 
pinout. 
The 
Intel 28F004BX-TL/BL 
are 8-bit wide 
low power 


flash memories 
with 4,194,304 
bits organized 
as 524,288 
bytes of information. 
They are offered 
in a 40-Lead 


TSOP package, 
which 
is ideal for space-constrained 
portable 
systems. 


These devices 
use an integrated 
Command 
User Interface 
(CUI) and Write State Machine 
(WSM) for simplified 


word/byte 
write and block erasure. The 28F400BX-TL/28F004BX-TL 
provide 
block locations 
compatible 
with 
Intel's 
Low Voltage 
MCS-186 
family, i386™, 
i486™ 
microprocessors. 
The 28F400BX-BL/28F004BX-BL 
pro- 
vide compatibility 
with Intel's 
80960KX 
and 80960SX 
families 
as well as other 
low voltage 
embedded 
micro- 


processors. 


The 
boot 
block 
includes 
a data 
protection 
feature 
to protect 
the boot code 
in critical 
applications. 
With a 


maximum 
access time of 150 ns, these 4-Mbit low power flash devices are very high performance 
memories 
at 
3.3V which 
interface 
to a wide range 
of low voltage 
microprocessors 
and microcontrollers. 
A deep 
power- 


down mode lowers the total Vcc power consumption 
to 0.66 p.W which is critical in handheld 
battery powered 


systems 
such as Handy Cellular Phones. 
For very high speed applications 
using a 5V supply, refer to the Intel 


28F400BX-T/B, 
28F004BX-T/B 
4-Mbit 
Boot Block Flash Memory 
family datasheet. 


Manufactured 
on Intel's 
0.8 micron 
ETOX III process, 
the 4-Mbit 
flash 
memory 
family 
provides 
world 
class 


quality, 
reliability 
and cost-effectiveness 
at the 4 Mbit density 
level. 


Throughout this datasheet 28F400BX-L refers to 
both the 28F400BX-TL and 28F400BX-BL devices 
and 28F004BX-L refers to both the 28F004BX-TL 
and 28F004BX-BL devices. The 4-Mbit flash family 
refers to both the 28F400BX-L and 28F004BX-L 
products. This datasheet comprises the specifica- 
tions for four separate products in the 4-Mbit flash 
family, Section 1 provides an overview of the 4-Mbit 
flash family including applications, pinouts and pin 
descriptions. Sections 2 and 3 describe in detail the 
specific memory organizations for the 28F400BX-L 
and 28F004BX-L products respectively, Section 4 
combines a description of the family's principles of 
operations. Finally section 5 describes the family's 
operating specifications. 


xS/x16 Products 
xS-Only Products 


28F400BX-TL 
28F004BX-TL 


28F400BX-BL 
28F004BX-BL 


1.1 Main Features 


The 
28F400BX-L/28F004BX-L 
boot 
block 
flash 


memory family is a very high performance 4-Mbit 
(4,194,304 bit) memory family organized as either 
256 KWords (262,144 words) of 16 bits each or 
512 Kbytes (524,288 bytes) of 8 bits each. 


Seven Separately 
Erasable 
Blocks 
including a 


Hardware-Lockable 
boot 
block 
(16,384 Bytes), 
two parameter blocks (8,192 Bytes each) and four 
main blocks (1 block of 98,304 Bytes and 3 blocks 
of 131,072 Bytes) are included on the 4-Mbit family. 
An erase operation erases one of the main blocks in 
typically 3.4 seconds and the boot or parameter 
blocks in typically 2.0 seconds, independent of the 
remaining blocks. Each block can be independently 
erased and programmed 10,000 times. 


The 
Boot 
Block 
is located at 
either the top 


(28F400BX-TL, 
28F004BX-TL) 
or 
the 
bottom 


(28F400BX-BL, 28F004BX-BL) of the address map 
in order to accommodate different microprocessor 
protocols for boot code location. The hardware 
lockable 
boot 
block 
provides the most secure 


code storage. The boot block is intended to store 
the kernel code required for booting-up a system. 
When the RP# pin is between 11.4V and 12.6V the 
boot block is unlocked and program and erase oper- 
ations can be performed. When the RP# pin is at or 
below 4.1V the boot block is locked and program 
and erase operations to the boot block are ignored. 


The 28F400BX-L products are available in the 
ROM/EPROM compatible pinout and housed in the 
44-Lead PSOP (Plastic Small Outline) package and 
the 56-Lead TSOP (Thin Small Outline, 1.2mm thick) 
package 
as 
shown 
in 
Figures 3 
and 
4, 
The 


28F004BX-L products are available in the 40-Lead 
TSOP (1.2mm thick) package as shown in Figure 5. 


The Command User Interlace (CUI) serves as the 
interface between the microprocessor or microcon- 
troller and the internal operation of the 28F400BX-L 
and 28F004BX-L flash memory products. 


Program 
and Erase Automation 
allow program 


and erase operations to be executed using a two- 
write command sequence to the CUI. The internal 
Write State Machine (WSM) automatically executes 
the algorithms and timings necessary for program 
and erase operations, including verifications, there- 
by unburdening the microprocessor or microcontrol- 
ler. Writing of memory data is performed in word or 
byte increments for the 28F400BX-L family and in 
byte increments for the 28F004BX-L family typically 
within 11 p.s. 


The Status Register (SR) indicates the status of the 
WSM and whether the WSM successfully completed 
the desired program or erase operation. 


,Maximum Access 
Time 
of 
150 ns 
(TACC) 
is 


achieved over the commercial temperature range 
(O°Cto + 70°C), Vee supply voltage range (3.0V to 
3.6V, 4.5V to 5.5V) and 50 pF output load. 


Ipp Program current is 40 mA for x16 operation 
and 30 mA for x8 operation. 
Ipp Erase current Is 


30 mA maximum. Vpp erase and programming 
voltage is 11.4V to 12.6V (Vpp = 12V ±50/0) un- 
der all operating conditions. 


Typical lee Active Current of 15 mA is achieved 
for the x16 products and the x8 products. 


The 4-Mbit flash family is also designed with an Au- 
tomatic Power Savings (APS) feature to minimize 
system battery current drain and allow for very low 
power designs. Once the device is accessed to read 
the array data, APS mode will immediately put the 
memory in static mode of operation where Ice active 
current is typically 0.8 mA until the next read is initia- 
ted. 


When the CE# and RP# pins are at Vee and the 
BYTE# pin (28F400BX-L-only) is at either Vee or 
GND the CMOS Standby mode is enabled where 
Ice is typically 45 p.A. 


A Deep Power-Down Mode is enabled when the 
PWD pin is at ground minimizing power consumption 
and providing write protection during power-up con- 
ditions. lee current during deep power-down mode 
is 0.20 /LA typical. An initial maximum access time 
or Reset Time of 700 ns is required from RP# 
switching until outputs are valid. Equivalently, the 
device has a maximum wake-up time of 580 ns until 
writes to the Command User Interface are recog- 
nized. When RP# is at ground the WSM is reset, the 
Status Register is cleared and the entire device is 
protected from being written to. This feature pre- 
vents data corruption and protects the code stored 
in the device during system reset. The system Reset 
pin can be tied to RP# to reset the memory to nor- 
mal read mode upon activation of the Reset pin. 
When the CPU enters reset mode, it expects to read 
the contents of a memory location. Furthermore, 
with 
on-chip 
program/erase 
automation 
in 
the 
4-Mbit family and the RP# functionality for data pro- 
tection, when the CPU is reset and even if a program 
or erase command is issued, the device will not rec- 
ognize any operation until RP# returns to its normal 
state. 


For the 2SF400BX-L, Byte-wide or Word-wide In- 
put/Output Control is possible by controlling the 
BYTE# pin. When the BYTE# pin is at a logic low 
the device is in the byte-wide mode (x8) and data is 
read and written through 00[0:7]. 
During the byte- 
wide mode, 00[8:14] 
are tri-stated and D015/A-1 
becomes the lowest order address pin. When the 
BYTE# pin is at a logic high the device is in the 
word-wide mode (x16) and data is read and written 
through 00[0:15]. 


1.2 
Applications 


The 4-Mbit low power boot block flash memory fami- 
ly combines high density, very low power, high per- 
formance, cost-effective flash memories with block- 
ing and hardware protection capabilities. Its flexibility 
and versatility will reduce costs throughout the prod- 
uct life cycle. Flash memory is ideal for Just-In-Time 
production flow, 
reducing system inventory and 
costs, and eliminating component handling during 
the production phase. During the product life cycle, 
when code updates or feature enhancements be- 
come necessary, flash memory will reduce the up- 
date costs by allowing either a user-performed code 
change via floppy disk or a remote code change via 
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a serial link. The 4-Mbit flash family provides full 
function, blocked flash memories suitable for a wide 
range of applications. These applications include 
Extended PC BIOS and ROM-able applications 
storage, Handy Digital Cellular Phone program 
and data storage and various other low power em- 
bedded applications where both program and data 
storage are required. 


Portable systems such as Notebook/Palmtop com- 
puters, are ideal applications for the 4-Mbit low pow- 
er flash products. Portable and handheld personal 
computer applications are becoming more complex 
with the addition of power management software to 
take advantage of the latest microprocessor tech- 
nology, the availability of ROM-based application 
software, pen tablet code for electronic hand writing, 
and diagnostic code. Figure 1 shows an example of 
a 28F400BX-TL application. 


This increase in software sophistication augments 
the probability that a code update will be required 
after the Notebook is shipped. The 4-Mbit flash 
products provide an inexpensive update solution for 
the notebook and handheld personal computers 
while extending their product lifetime. Furthermore, 
the 4-Mbit flash products' deep power-down mode 
provides added flexibility for these battery-operated 
portable designs which require operation at very low 
power levels. 


The 4-Mbit low power flash products also provide 
excellent design solutions for Handy Digital Cellular 
Phone applications requiring low voltage supply, 
high performance, high density storage capability 
coupled with modular software designs, and a small 
form factor package (x8-only bus). The 4-Mbit's 
blocking scheme allows for an easy segmentation of 
the embedded code with; 16-Kbytes of Hardware- 
Protected Boot code, 4 Main Blocks of program 
code and 2 Parameter Blocks of 8-Kbytes each for 
frequently updatable data storage and diagnostic 
messages 
(e.g., 
phone 
numbers, 
authorization 


codes). Figure 2 is an example of such an applica- 
tion with the 28F004BX-TL. 


These are a few actual examples of the wide range 
of applications for the 4-Mbit low power Boot Block 
flash memory family which enable system designers 
achieve the best possible product design. Only your 
imagination limits the applicability of such a versatile 
low power product family. 
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grades to future higher density boot block memories. 


The 28F400BX-L 44-Lead 
PSOP pinout follows 
the 
industry 
standard 
ROM/EPROM 
pinout 
as 
shown in Figure 3 and provides an upgrade for the 
28F200BX-L Low Power Boot Block flash memory 
family. 
Furthermore, 
the 
28F400BX-L 
56-Lead 


The 28F004BX-L 40-Lead TSOP pinout shown in 
Figure 5 is 100% compatible and provides a density 
upgrade for the 28F002BX-L 2-Mbit Low Power Boot 
Block flash memory family. 
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Figure 3. PSOP Lead Configuration 
for x8/x16 
28F4008X-L 
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Figure 4. TSOP Lead Configuration 
for x8 28F400BX·L 
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Figure 5. TSOP Lead Configuration 
for x8 28FOO4BX-L 
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Symbol 
Type 
Name and Function 


Ao-A17 
I 
ADDRESS 
INPUTS for memory addresses. 
Addresses 
are internally 
latched 
during a write cycle. 


Ag 
I 
ADDRESS 
INPUT: When Ag is at 12V the signature 
mode is accessed. 
During this 
mode Ao decodes 
between 
the manufacturer 
and device 
ID's. When BYTE# 
is at 
a logic low only the lower byte of the signatures 
are read. 0015/ A -1 is a don't 
care in the signature 
mode when BYTE# 
is low. 


DOO-DO? 
I/O 
DATA INPUTS/OUTPUTS: 
Inputs array data on the second CE # and WE # cycle 
during a program 
command. 
Inputs commands 
to the command 
user interface 
when CE # and WE # are active. Data is internally 
latched during the write and 
program 
cycles. Outputs 
array, Intelligent 
Identifier 
and status register data. The 
data pins float to tri-state when the chip is deselected 
or the outputs are disabled. 


008-0015 
I/O 
DATA INPUT/OUTPUTS: 
Inputs array data on the second 
CE # and WE # cycle 
during a program 
command. 
Data is internally 
latched during the write and program 
cycles. The data pins float to tri-state 
when the chip is deselected 
or the outputs 
are disabled 
as in the byte-wide 
mode (BYTE # = "0"). 
In the byte-wide 
mode 
0015/ A-1 
becomes 
the lowest order address for data output on DOO-DO? 


CE# 
I 
CHIP ENABLE: Activates 
the device's 
control 
logic, input buffers, decoders 
and 
sense amplifiers. 
CE # is active low; CE # high deselects 
the memory device and 
reduces 
power consumption 
to standby 
levels. If CE # and RP # are high, but not 
at a CMOS high level, the standby current will increase 
due to current flow through 
the CE# 
and RP# 
input stages. 


RP# 
I 
RESET/DEEP 
POWER-DOWN: 
Provides Three-State 
control. 
Puts the device in 
deep power-down 
mode. Locks the boot block from program/erase. 


When RP # is at logic high level and equals 4.1V maximum 
the boot block is 
locked and cannot 
be programmed 
or erased. 


When RP# 
= 11.4V minimum the boot block is unlocked 
and can be programmed 
or erased. 


When RP# 
is at a logic low level the boot block is locked, the deep power-down 
mode is enabled 
and the WSM is reset preventing 
any blocks from being 
programmed 
or erased, therefore 
providing 
data protection 
during power 
transitions. 
When RP# 
transitions 
from logic low to logic high, the flash memory 
enters the read-array 
mode. 


OE# 
I 
OUTPUT 
ENABLE: Gates the device's 
outputs through the data buffers during a 
read cycle. OE# 
is active low. 


WE# 
I 
WRITE 
ENABLE: Controls 
writes to the Command 
Register 
and array blocks. 
WE # is active low. Addresses 
and data are latched on the rising edge of the WE # 
pulse. 


Symbol 
Type 
Name and Function 


BYTE# 
I 
BYTE# 
ENABLE: Controls 
whether 
the device operates 
in the byte-wide 
mode (xB) or 
the word-wide 
mode (x16). BYTE # = "0" 
enables the byte-wide 
mode, where data is 
read and programmed 
on 000- OO? and 0015/A -1 becomes 
the lowest order 
address that decodes 
between 
the upper and lower byte. 008-0014 are tri-stated 
during the byte-wide 
mode. BYTE# 
= "1" enables the word-wide 
mode where data is 
read and programmed 
on 000-0015. 


Vpp 
PROGRAM/ERASE 
POWER SUPPLY: For erasing memory array blocks or 
programming 
data in each block. 
Note: Vpp < VPPLMAX 
memory contents 
cannot 
be altered. 


Vcc 
DEVICE 
POWER SUPPLY (3.3V ±0.3, 5V ± 10%) 


GNO 
GROUND: 
For all internal circuitry. 


NC 
NO CONNECT: 
Pin may be driven or left floating. 


OU 
DON'T USE PIN: Pin should not be connected 
to anything. 
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Symbol 
Type 
Name and Function 


Ao-A18 
I 
ADDRESS 
INPUTS for memory addresses. 
Addresses 
are internally 
latched during 
a write cycle. 


Ag 
I 
ADDRESS 
INPUT: When Ag is at 12V the signature 
mode is accessed. 
During this 
mode Ao decodes 
between 
the manufacturer 
and device ID's. 


DQO-DQ7 
I/O 
DATA INPUTS/OUTPUTS: 
Inputs array data on the second CE # and WE # cycle 
during a program 
command. 
Inputs commands 
to the command 
user interface 
when CE # and WE # are active. Data is internally 
latched during the write and 
program 
cycles. Outputs 
array, Intelligent 
Identifier 
and status register data. The 
data pins float to tri-state 
when the chip is deselected 
or the outputs are disabled. 


CE# 
I 
CHIP ENABLE: Activates 
the device's 
control 
logic, input buffers, decoders 
and 
sense amplifiers. 
CE # is active low; CE # high deselects 
the memory 
device and 
reduces power consumption 
to standby 
levels. 


RP# 
I 
RESET/DEEP 
POWER· DOWN: Provides Three-State 
control. 
Puts the device in 
deep power-down 
mode. Locks the Boot Block from program/erase. 


When RP# 
is at logic high level and equals 4.1V maximum 
the Boot Block is locked 


and cannot 
be programmed 
or erased. 


When RP# 
= 11.4V minimum the Boot Block is unlocked 
and can be programmed 


or erased. 


When RP# 
is at a logic low level the Boot Block is locked, the deep power-down 
mode is enabled 
and the WSM is reset preventing 
any blocks from being 


programmed 
or erased, therefore 
providing 
data protection 
during power 


transitions. 
When RP# 
transitions 
from logic low to logic high, the flash memory 


enters the read-array 
mode. 


OE# 
I 
OUTPUT 
ENABLE: Gates the device's 
outputs through 
the data buffers during a 


read cycle. OE # is active low. 


WE# 
I 
WRITE 
ENABLE: Controls 
writes to the Command 
Register and array blocks. WE # 
is active low. Addresses 
and data are latched on the rising edge of the WE # pulse. 


Vpp 
PROGRAM/ERASE 
POWER SUPPLY: For erasing memory array blocks or 
programming 
data in each block. 
Note: Vpp < VPPLMAX memory contents 
cannot be altered. 


Vcc 
DEVICE 
POWER SUPPLY (3.3V ±0.3V, 
5V ± 10%) 


GND 
GROUND: 
For all internal circuitry. 


NC 
NO CONNECT: 
Pin may be driven or left floating. 


DU 
DON'T USE PIN: Pin should not be connected 
to anything. 


2.1.1 
BLOCKING 


The 28F400BX-L uses a blocked array architecture 
to provide independent erasure of memory blocks. A 
block is erased independently of other blocks in the 
array when an address is given within the block ad- 
dress range and the Erase Setup and Erase Confirm 
commands are written to the CUI. The 28F400BX-L 
is a random read/write memory, only erasure is per- 
formed by block. 


2.1.1.1 
Boot 
Block Operation 
and Data 
Protection 


The 16-Kbyte boot block provides a lock feature for 
secure code storage. The intent of the boot block is 
to provide a secure storage area for the kernel code 
that is required to boot a system in the event of pow- 
er failure or other disruption during code update. 
This lock feature ensures absolute data integrity by 
preventing the boot block from being written or 
erased when RP# is not at 12V. The boot block can 
be erased and written when RP# is held at 12V for 
the duration of the erase or program operation. This 
allows customers to change the boot code when 
necessary while providing security when needed. 
See the Block Memory Map section for address lo- 
cations of the boot block for the 28F400BX-TL and 
28F400BX-BL. 


2.1.1.2 Parameter 
Block Operation 


The 28F400BX-L has 2 parameter blocks (8 Kbytes 
each). The parameter blocks are intended to provide 
storage for frequently updated system parameters 
and configuration or diagnostic information. The pa- 
rameter blocks can also be used to store additional 
boot or main code. The parameter blocks however, 
do not have the hardware write protection feature 
that the boot block has. The parameter blocks pro- 
vide for more efficient memory utilization when deal- 
ing with parameter changes versus regularly blocked 
devices. See the Block Memory Map section for ad- 
dress locations of the parameter blocks for the 
28F400BX-TL and 28F400BX-BL. 


2.1.1.3 Main Block Operation 


Four 
main 
blocks 
of 
memory 
exist 
on 
the 
28F400BX-L (3 x 128-Kbyte blocks and 1 x 96-Kbyte 
blocks). See the following section on Block Memory 
Map for the address location of these blocks for the 
28F400BX-TL and 28F400BX-BL products. 
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2.1.2 
BLOCK 
MEMORY 
MAP 


Two versions of the 28F400BX-L product exist to 
support two different memory maps of the array 
blocks in order to accommodate different microproc- 
essor 
protocols 
for 
boot 
code 
location. 
The 
28F400BX-TL memory map is inverted from the 
28F400BX-BL memory map. 


2.1.2.1 28F400BX·BL 
Memory 
Map 


The 28F400BX-BL device has the 16-Kbyte boot 
block located from OOOOOH 
to 01FFFH to accommo- 
date those microprocessors that boot from the bot- 
tom 
of 
the 
address 
map 
at 
OOOOOH.In 
the 
28F400BX-B the first 8-Kbyte parameter block re- 
sides in memory space from 02000H to 02FFFH. 
The second 8-Kbyte parameter block resides in 
memory space 
from 
03000H 
to 
03FFFH. The 
96-Kbyte main block resides in memory space from 
04000H to OFFFFH. The three 
128-Kbyte main 
block resides in memory space from 10000H to 
1FFFFH, 20000H 
to 
2FFFFH 
and 
30000H 
to 
3FFFFH (word locations). See Figure 7. 
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2.1.2.2 
28F400BX·TL 
Memory 
Map 


The 28F400BX-TL device has the 16-Kbyte boot 
block located from 3EOOOHto 3FFFFH to accommo- 
date those microprocessors that boot from the top 
of the address map. In the 28F400BX-T the first 
8-Kbyte parameter block resides in memory space 
from 3DOOOHto 3DFFFH. The second 8-Kbyte pa- 
rameter 
block 
resides 
in 
memory 
space 
from 
3COOOHto 3CFFFH. The 96-Kbyte main block re- 
sides in memory space from 30000H to 3BFFFH. 
The three 128-Kbyte main blocks reside in memory 
space from 20000H to 2FFFFH, 10000H to 1FFFFH 
and OOOOOHto OFFFFHas shown in Figure 8. 
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The 28F004BX-L uses a blocked array architecture 
to provide independent erasure of memory blocks. A 
block is erased independently of other blocks in the 
array when an address is given within the block ad- 
dress range and the Erase Setup and Erase Confirm 
commands are written to the CUI. The 28F004BX-L 
is a random read/write memory, only erasure is per- 
formed by block. 


3.1.1.1 
Boot Block Operation 
and Data 
Protection 


The 16-Kbyte boot block provides a lock feature for 
secure code storage. The intent of the boot block is 
to provide a secure storage area for the kernel code 
that is required to boot a system in the event of pow- 
er failure or other disruption during code update. 
This lock feature ensures absolute data integrity by 
preventing the boot block from being programmed 
or erased when RP# is not at 12V. The boot block 
can be erased and programmed when RP# is held 
at 12V for the duration of the erase or program oper- 
ation. This allows customers to change the boot 
code when necessary while still providing security 
when needed. See the Block Memory Map section 
for address locations of the boot block for the 
28F004BX-TL and 28F004BX-BL. 


3.1.1.2 
Parameter 
Block Operation 


The 28F004BX-L has 2 parameter blocks (8 Kbytes 
each). The parameter blocks are intended to provide 
storage for frequently updated system parameters 
and configuration or diagnostic information. The pa- 
rameter blocks can also be used to store additional 
boot or main code. The parameter blocks however, 
do not have the hardware write protection feature 
that the boot block has. Parameter blocks provide 
for more efficient memory utilization when dealing 
with 
small 
parameter 
changes 
versus 
regularly 
blocked devices. See the Block Memory Map sec- 
tion for address locations of the parameter blocks 
for the 28F004BX-TL and 28F004BX-BL. 


3.1.1.3 
Main Block Operation 


Two 
main 
blocks 
of 
memory 
exist 
on 
the 
28F004BX-L (3 x 128-Kbyte blocks and 1 x 96-Kbyte 
blocks). See the following section on Block Memory 
Map for the address location of these blocks for the 
28F004BX-TL and 28F004BX-BL. 


Two versions of the 28F004BX-L product exist to 
support two different memory maps of the array 
blocks in order to accommodate different microproc- 
essor 
protocols 
for 
boot 
code 
location. 
The 


28F004BX-TL memory map is inverted from the 
28F004BX-BL memory map. 


3.1.2.1 
28F004BX-BL 
Memory 
Map 


The 28F004BX-BL device has the 16-Kbyte boot 
block located from OOOOOH 
to 03FFFH to accommo- 


date those microprocessors that boot from the bot- 
tom 
of 
the 
address 
map 
at 
OOOOOH.In 
the 


28F004BX-BL the first 8-Kbyte parameter block re- 
sides in memory from 04000H to 05FFFH. The sec- 
ond 8-Kbyte parameter block resides in memory 
space from 06000H to 07FFFH. The 96-Kbyte main 
block resides in memory space from 08000H to 
1FFFFH. The three 128-Kbyte main blocks reside in 
memory space from 20000H to 3FFFFH, 40000H to 
5FFFFH and 60000H to 7FFFH. See Figure 10. 
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3.1.2.2 
28F004BX·TL 
Memory 
Map 


The 28F004BX-TL device has the 16-Kbyte boot 
block located from 7COOOHto 7FFFFH to accom· 
modate those microprocessors that boot from the 
top of the address map. In the 28F004BX-TL the first 
8-Kbyte parameter block resides in memory space 
from 7AOOOHto 7BFFFH. The second 8-Kbyte pa- 
rameter 
block 
resides 
in 
memory space 
from 
78000H to 79FFFH. The 96-Kbyte main block re- 
sides in memory space from 60000H to 77FFFH. 
The three 128-Kbyte main blocks reside in memory 
space from 40000H to 5FFFFH, 20000H to 3FFFFH 
and OOOOOHto 1FFFFH. 
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128-Kbyte MAIN BLOCK 


128-Kbyte MAIN BLOCK 


128-Kbyte MAIN BLOCK 


4.0 
PRODUCT FAMILY PRINCIPLES 
OF OPERATION 


Flash memory augments EPROM functionality with 
in-circuit electrical write and erase. The 4-Mbit flash 
memory family utilizes a Command User Interface 
(CUI) and internally generated and timed algorithms 
to simplify write and erase operations. 


The CUI allows for fixed power supplies during era- 
sure and programming, and maximum EPROM com- 
patibility. 


In the absence of high voltage on the Vpp pin, the 
4·Mbit flash family will only successfully execute the 
following commands: Read Array, Read Status Reg- 
ister, Clear Status Register and Intelligent Identifier 
mode. The device provides standard EPROM read, 
standby and output disable operations. Manufactur- 
er Identification and Device Identification data can 
be accessed through the CUI or through the stan- 
dard EPROM A9 high voltage access 
(VID) 
(for 


PROM programmer equipment). 


The same EPROM read, standby and output disable 
functions are available when high voltage is applied 
to the Vpp pin. In addition, high voltage on Vpp al- 
lows write and erase of the device. All functions as- 
sociated with altering memory contents: write and 
erase, Intelligent Identifier read and Read Status are 
accessed via the CUI. 


The purpose of the Write State Machine (WSM) is to 
completely automate the write and erasure of the 
device. The WSM will begin operation upon receipt 
of a signal from the CUI and will report status back 
through a Status Register. The CUI will handle the 
WE# interface to the data and address latches, as 
well as system software requests for status while the 
WSM is in operation. 


Flash memory reads, erases and writes in-system 
via the local CPU. All bus cycles to or from the flash 
memory conform to standard microprocessor bus 
cycles. 
' 


Mode 
Notes 
RP# 
CE# 
OE# 
WE# 
Ag 
Ao 
Vpp 
DQo-15 


Read 
1,2,3 
VIH 
VIL 
VIL 
VIH 
X 
X 
X 
DOUT 


Output Disable 
VIH 
VIL 
VIH 
VIH 
X 
X 
X 
HighZ 


Standby 
VIH 
VIH 
X 
X 
X 
X 
X 
HighZ 


Deep Power-Down 
9 
VIL 
X 
X 
X 
X 
X 
X 
HighZ 


Intelligent 
Identifier 
(Mfr) 
4 
VIH 
VIL 
VIL 
VIH 
VID 
VIL 
X 
0089H 


Intelligent 
Identifier 
(Device) 
4,5,10 
VIH 
VIL 
VIL 
VIH 
VID 
VIH 
X 
4470H 
4471H 


Write 
6,7,8 
VIH 
VIL 
VIH 
VIL 
X 
X 
X 
DIN 


Mode 
Notes 
RP# 
CE# 
OE# 
WE# 
Ag 
Ao 
A.1 
Vpp 
DQo-7 
DQS-14 


Read 
1,2,3 
VIH 
VIL 
VIL 
VIH 
X 
X 
X 
X 
DOUT 
HighZ 


Output 
Disable 
VIH 
VIL 
VIH 
VIH 
X 
X 
X 
X 
HighZ 
HighZ 


Standby 
VIH 
VIH 
X 
X 
X 
X 
X 
X 
HighZ 
HighZ 


Deep Power-Down 
VIL 
X 
X 
X 
X 
X 
X 
X 
HighZ 
HighZ 


Intelligent 
Identifier 
4 
VIH 
VIL 
VIL 
VIH 
VID 
VIL 
X 
X 
89H 
HighZ 
(Mfr) 


Intelligent 
Identifier 
4,5,10 
VIH 
VIL 
VIL 
VIH 
VID 
VIH 
X 
X 
70H 
HighZ 
(Device) 
71H 


Write 
6,7,8 
VIH 
VIL 
VIH 
VIL 
X 
X 
X 
X 
DIN 
HighZ 


NOTES: 
1. Refer to DC Characteristics. 
2. X can be VIL or VIH for control 
pins and addresses. 
VPPL or VPPH for Vpp. 
3. See DC Characteristics 
for VpPL, VPPH. VHH, VIO voltages. 


4. Manufacturer 
and Device 
codes 
may also be accessed 
via a CUI write sequence. 
A1-A17 = VIL. 
5. Device 
10 = 4470H 
for 28F400BX-TL 
and 4471H 
for 28F400BX-BL. 


6. Refer to Table 
4 for valid DIN during 
a write operation. 
7. Command 
writes 
for Block 
Erase or Word/By1e 
Write are only executed 
when 
Vpp = VPPH. 


8. To write or erase 
the boot block, 
hold RP# 
at VHH. 
9. RP# 
must be at GNO 
±0.2V 
to meet the 1.2 I-'A maximum 
deep 
power-down 
current. 


10. The device 
10 codes 
are identical 
to those 
of the 28F400BX 
5V version. 
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Mode 
Notes 
RP# 
CE# 
OE# 
WE# 
Ag 
Ao 
Vpp 
DQo-7 


Read 
1,2,3 
VIH 
VIL 
VIL 
VIH 
X 
X 
X 
DOUT 


Output Disable 
VIH 
VIL 
VIH 
VIH 
X 
X 
X 
HighZ 


Standby 
VIH 
VIH 
X 
X 
X 
X 
X 
HighZ 


Deep Power-Down 
9 
VIL 
X 
X 
X 
X 
X 
X 
HighZ 


Intelligent 
Identifier 
(Mfr) 
4 
VIH 
VIL 
VIL 
VIH 
VID 
VIL 
X 
89H 


Intelligent 
Identifier 
(Device) 
4,5,10 
VIH 
VIL 
VIL 
VIH 
VID 
VIH 
X 
78H 
79H 


Write 
6,7,8 
VIH 
VIL 
VIH 
VIL 
X 
X 
X 
DIN 


NOTES: 
1. Refer to DC Characteristics. 
2. X can be VIL or VIH for control 
pins and addresses, 
VPPL or VPPH for Vpp. 
3. See DC Characteristics 
for VPPL. VPPH, VHH. VIO voltages. 
4. Manufacturer 
and Device 
codes 
may also be accessed 
via a CUI write sequence. 
A1-Ae, 
A1O-A1e 
= VIL. 


5. Device 
10 = 78H for 28F004BX-TL 
and 79H for 28F004BX-BL. 


6. Refer to Table 
4 for valid DIN during 
a write operation. 


7. Command 
writes 
for Block 
erase 
or byte program 
are only executed 
when 
VPP = VPPH. 
8. Program 
or erase the Boot block 
by holding 
RP# 
at VHH. 
9. RP# 
must be at GND 
±0.2V 
to meet the 1.2 /LA maximum 
deep 
power-down 
current. 


10. The device 
10 codes 
are identical 
to those 
of the 28F004BX 
5V version. 


The 4-Mbit 
flash family 
has three 
user read modes; 
Array, 
Intelligent 
Identifier, 
and 
Status 
Register. 


Status Register 
read mode will be discussed 
in detail 
in the "Write 
Operations" 
section. 


During power-up 
conditions 
(Vcc supply ramping), 
it 
takes a maximum 
of 700 ns from VCC at 3.0V mini- 
mum to obtain 
valid data on the outputs. 


If the memory 
is not in the Read Array 
mode, 
it is 
necessary 
to write the appropriate 
read mode com- 
mand to the CUI. The 4-Mbit 
flash family 
has three 
control 
functions, 
all of which 
must be logically 
ac- 
tive, to obtain data at the outputs. 
Chip-Enable 
CE # 


is the device 
selection 
control. 
Power-Down 
RP# 
is 
the device 
power control. 
Output-Enable 
OE # is the 
DATA INPUT/OUTPUT 
(00[0:15] 
or 00[0:7]) 
direc- 
tion control 
and when 
active 
is used to drive 
data 
from the selected 
memory 
onto the I/O bus. 


4.3.1.1 Output Control 


With OE # at logic-high 
level (VIH), the output 
from 
the 
device 
is disabled 
and 
data 
input/output 
pins 
(00[0:15] 
or 00[0:7] 
are tri-stated. 
Data 
input 
is 
then controlled 
b~ WE # . 


4.3.1.2 Input Control 


With WE# 
at logic-high 
level (VIH), input to the de- 


vice is disabled. 
Data 
Input/Output 
pins (00[0:15] 


or 00[0:7]) 
are controlled 
by OE#. 


The manufacturer 
and device codes are read via the 


CUI or by taking 
the A9 pin to 12V. Writing 
90H to 


the CUI places 
the device 
into Intelligent 
Identifier 


read mode. A read of location 
OOOOOHoutputs 
the 


manufacturer's 
identification 
code, 0089H, and loca- 


tion 
00001 H outputs 
the 
device 
code; 
4470H 
for 


28F400BX-TL, 
4471 H 
for 
28F4001 BX-BL. 
When 


BYTE# is at a logic low only the lower by1e of the 
above 
signatures 
is read and 0015/ A -1 is a "don't 


care" 
during Intelligent 
Identifier 
mode. A read array 


command 
must be written to the CUI to return to the 


read array mode. 
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The manufacturer and device codes are also read 
via the CUI or by taking the A9 pin to 12V. Writing 
90H to the CUI places the device into Intelligent 
Identifier read mode. A read of location OOOOOH 
out- 
puts the manufacturer's identification code, 89H, 
and location 00001H outputs the device code; 78H 
for 28F004BX-TL, 79H for 28F004BX-BL. 


Commands are written to the CUI using standard mi- 
croprocessor write timings. The CUI serves as the 
interface between the microprocessor and the inter- 
nal chip operation. The CUI can decipher Read Ar- 
ray, Read Intelligent Identifier, Read Status Register, 
Clear Status Register, Erase and Program com- 
mands. In the event of a read command, the CUI 
simply points the read path at either the array, the 
Intelligent Identifier, or the status register depending 
on the specific read command given. For a program 
or erase cycle, the CUI informs the write state ma- 
chine that a write or erase has been requested. Dur- 
ing a program cycle, the Write State Machine will 
control the program sequences and the CUI will only 
respond to status reads. During an erase cycle, the 
CUI will respond to status reads and erase suspend. 
After the Write State Machine has completed its 
task, it will allow the CUI to respond to its full com- 
mand set. The CUI will stay in the current command 
state until the microprocessor issues another com- 
mand. 


The CUI will successfully initiate an erase or write 
operation only when Vpp is within its voltage range. 
Depending upon the application, the system design- 
er may choose to make the Vpp power supply 
switchable, available only when memory updates 
are desired. The system designer can also choose 
to "hard-wire" Vpp to 12V. The 4-Mbit flash memory 
family is designed to accommodate either design 
practice. It is recommended that RP# be tied to logi- 
cal Reset for data protection during unstable CPU 
reset function as described in the "Product Family 
Overview" section. 


In the case of Boot Block modifications (write and 
erase), RP# is set to VHH = 12V typically, in addi- 
tion to Vpp at high voltage. 


However, if RP# is not at VHHwhen a program or 
erase operation of the boot block is attempted, the 
corresponding status register bit (Bit 4 for Program 
and Bit 5 for Erase, refer to Table 5 for Status Regis- 
ter Definitions) is set to indicate the failure to com- 
plete the operation. 


4.4.2 
COMMAND 
USER INTERFACE 
(CUI) 


The Command User Interface (CUI) serves as the 
interface to the microprocessor. The CUI points the 
read/write path to the appropriate circuit block as 
described in the previous section. After the WSM 
has completed its task, it will set the WSM Status bit 
to a "1", which will also allow the CUI to respond to 
its full command set. Note that after the WSM has 
returned control to the CUI, the CUI will remain in its 
current state. 


Command 
Device Mode 
Codes 


00 
Invalid/Reserved 
10 
Alternate Program Setup 
20 
Erase Setup 
40 
Program Setup 
50 
Clear Status Register 
70 
Read Status Register 
90 
Intelligent Identifier 
BO 
Erase Suspend 
DO 
Erase Resume/Erase Confirm 
FF 
Read Array 


4.4.2.2 Command Function Descriptions 


Device operations are selected by writing specific 
commands into the CUI. Table 4 below defines the 
4-Mbit flash memory family commands. 


Bus 
Notes 
First Bus Cycle 
Second Bus Cycle 
Command 
Cycles 
Req'd 
8 
Operation 
Address 
Data 
Operation 
Address 
Data 


Read Array 
1 
1 
Write 
X 
FFH 


Intelligent Identifier 
3 
2,4 
Write 
X 
90H 
Read 
IA 
110 


Read Status Register 
2 
3 
Write 
X 
70H 
Read 
X 
SRD 


Clear Status Register 
1 
Write 
X 
50H 


Erase Setup/Erase Confirm 
2 
5 
Write 
BA 
20H 
Write 
BA 
DOH 


Word/Byte Write 
2 
6, 7 
Write 
WA 
40H 
Write 
WA 
WD 
Setup/Write 


Erase Suspend/Erase Resume 
2 
Write 
X 
BOH 
Write 
X 
DOH 


Alternate Word/Byte Write 
2 
WD 
2,3,7 
Write 
WA 
10H 
Write 
WA 


Setup/Write 


NOTES: 
1. Bus operations 
are defined 
in Tables 
1, 2, 3. 


2. IA = Identifier 
Address: 
OOH for manufacturer 
code, 
01 H for device 
code. 


3. SRD 
= Data read from 
Status 
Register. 


4. liD = Intelligent 
Identifier 
Data. 


Following 
the Intelligent 
Identifier 
command, 
two read operations 
access 
manufacturer 
and device 
codes. 


5. BA = Address 
within 
the block 
being erased. 


6. WA = Address 
to be written. 


WD = Data to be written 
at location 
WA. 


7. Either 40H or 10H commands 
is valid. 
8. When 
writing 
commands 
to the device 
the upper 
data 
bus (D08-D015] 
= X (28F400BX-L-only) 
which 
is either 
Vcc 
or 


VSS to avoid 
burning 
additional 
current. 


These are unassigned commands. It is not recom- 
mended that the customer use any command other 
than the valid commands specified above. Intel re- 
serves the right to redefine these codes for future 
functions. 


Read Array (FFH) 


This single write command points the read path at 
the array. If the host CPU performs a CE'* fOE '* 
controlled read immediately following a two-write se- 
quence that started the WSM, then the device will 
output status register contents. If the Read Array 
command is given after Erase Setup the device is 
reset to read the array. A two Read Array command 
sequence (FFH) is required to reset to Read Array 
after Program Setup. 


Intelligent 
Identifier (90H) 


After this command is executed, the CUI points the 
output path to the Intelligent Identifier circuits. Only 
Intelligent Identifier values at addresses 0 and 1 can 
be read (only address AO is used in this mode, all 
other address inputs are ignored). 


Read Status Register (70H) 


This is one of the two commands that is executable 
while the state machine is operating. After this com- 
mand is written, a read of the device will output the 
contents of the status register, regardless of the ad- 
dress presented to the device. 


The device automatically enters this mode after pro- 
gram or erase has completed. 


Clear Status Register (SOH) 


The WSM can only set the Program Status and 
Erase Status bits in the status register, it can not 
clear them. Two reasons exist for operating the 
status register in this fashion. The first is a synchro- 
nization. The WSM does not know when the host 
CPU has read the status register, therefore it would 
not know when to clear the status bits. Secondly, if 
the CPU is programming a string of bytes, it may be 
more efficient to query the status register after pro- 
gramming the string. Thus, if any errors exist while 
programming the string, the status register will re- 
turn the accumulated error status. 


Program 
Setup (40H or 10H) 


This command simply sets the CUI into a state such 
that the next write will load the address and data 
registers. Either 40H or 10H can be used for Pro- 
gram Setup. Both commands are included to ac- 
commodate efforts to achieve an industry standard 
command code set. 


Program 


The second write after the program setup command, 
will latch addresses and data. Also, the CUI initiates 
the WSM to begin execution of the program algo- 
rithm. While the WSM finishes the algorithm, the de- 
vice will output Status Register contents. Note that 
the WSM cannot be suspended during program- 
ming. 


Erase Setup (20H) 


Prepares the CUI for the Erase Confirm command. 
No other action is taken. If the next command is not 
an Erase Confirm command then the CUI will set 
both the Program Status and Erase Status bits of the 
Status Register to a "1", place the device into the 
Read Status Register state, and wait for another 
command. 


Erase Confirm 
(DOH) 


If the previous command was an Erase Setup com- 
mand, then the CUI will enable the WSM to erase, at 
the same time closing the address and data latches, 
and respond only to the Read Status Register and 
Erase Suspend commands. While the WSM is exe- 
cuting, the device will output Status Register data 
when OE# is toggled low. Status Register data can 
only be updated by toggling either OE# or CE# low. 


Erase Suspend 
(BOH) 


This command only has meaning while the WSM is 
executing an Erase operation, and therefore will only 
be responded to during an erase operation. After 
this command has been executed, the CUI will initi- 
ate the WSM to suspend Erase operations, and then 
return to responding to only Read Status Register or 
to the Erase Resume commands. Once the WSM 
has reached the Suspend state, it will set an output 
into the CUI which allows the CUI to respond to the 
Read Array, Read Status Register, and Erase Re- 
sume commands. In this mode, the CUI will not re- 
spond to any other commands. The WSM will also 
set the WSM Status bit to a "1". The WSM will con- 


tinue to run, idling in the SUSPEND state, regardless 
of the state of all input control pins, with the exclu- 
sion of RP#. RP# low will immediately shut down 
the WSM and the remainder of the chip. 


Erase Resume 
(DOH) 


This command will cause the CUI to clear the Sus- 
pend state and set the WSM Status bit to a "0", but 
only if an Erase Suspend command was previously 
issued. Erase Resume will not have any effect in all 
other conditions. 


The 4 Mbit flash family contains a status register 
which may be read to determine when a program or 
erase operation is complete, and whether that oper- 
ation completed successfully. The status register 
may be read at any time by writing the Read Status 
command to the CUI. After writing this command, all 
subsequent Read operations output data from the 
status register until another command is written to 
the CUI. A Read Array command must be written to 
the CUI to return to the Read Array mode. 


The status register bits are output on 00[0:7] 
whether the device is in the byte-wide (x8) or word- 
wide (x16) mode for the 28F400BX-L. In the word- 
wide mode the upper byte, 00[8:15] 
is set to OOH 
during a Read Status command. In the byte-wide 
mode, 00[8:14] 
is tri-stated and 0015/ A -1 
retains 
the low order address function. 


It should be noted that the contents of the status 
register are latched on the falling edge of OE# or 
CE# whichever occurs last in the read cycle. This 
prevents possible bus errors which might occur if the 
contents of the status register change while reading 
the status register. CE# or OE# must be toggled 
with each subsequent status read, or the completion 
of a program or erase operation will not be evident. 


The Status Register is the interface between the mi- 
croprocessor and the Write State Machine (WSM). 
When the WSM is active, this register will indicate 
the status of the WSM, and will also hold the bits 
indicating whether or not the WSM was successful in 
performing the desired operation. The WSM sets 
status bits "Three" through "Seven" and clears bits 
"Six" 
and "Seven", 
but cannot clear status bits 
"Three" 
through "Five". 
These bits can only be 
cleared by the controlling CPU through the use of 
the Clear Status Register command. 
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4.4.3.1 
Status 
Register 
Bit Definition 


Table 5. Status Register 
Definitions 


SR.7 = WRITE STATE MACHINE STATUS 


1 = Ready 
o = Busy 


SR.6 = ERASE SUSPEND STATUS 


1 = Erase Suspended 
o = Erase in Progress/Completed 


SR.5 = ERASE STATUS 


1 = Error in Block Erasure 
o = Successful Block Erase 


SR.4 = PROGRAM STATUS 


1 = Error in Byte/Word Program 
o = Successful Byte/Word Program 


SR.3 = Vpp STATUS 
1 = Vpp Low Detect; Operation Abort 
0= 
Vpp OK 


Write State Machine Status bit must first be checked to 
determine byte/word program or block erase completion, 
before the Program or Erase Status bits are checked for 
success. 


When Erase Suspend is issued, WSM halts execution 
and sets both WSMS and ESS bits to "1". ESS bit re- 
mains set to "1" until an Erase Resume command is is- 
sued. 


When this bit is set to "1". WSM has applied the maxi- 
mum number of erase pulses to the block and is still un- 
able to successfully perform an erase verify. 


When this bit is set to "1", WSM has attempted but failed 
to Program a'byte or word. 


The Vpp Status bit unlike an AID converter, does not 
provide continuous indication of Vpp level. The WSM in- 
terrogates the Vpp level only after the byte write or block 
erase command sequences have been entered and in- 
forms the system if Vpp has not been switched on. The 
Vpp Status bit is not guaranteed to report accurate feed- 
back between VpPLand VPPH. 


SR.2-SR.O = RESERVED FOR FUTURE ENHANCEMENTS 
These bits are reserved for future use and should be masked out when polling the Status Register. 


4.4.3.2 
Clearing 
the Status 
Register 


Certain bits in the status register are set by the write 
state machine, and can only be reset by the system 
software. These bits can indicate various failure con- 
ditions. By allowing the system software to control 
the resetting of these bits, several operations may 
be performed (such as cumulatively programming 
several bytes or erasing multiple blocks in se- 
quence). The status register may then be read to 
determine if an error occurred during that program- 
ming or erasure series. This adds flexibility to the 
way the device may be programmed or erased. To 
clear the status register, the Clear Status Register 
command is written to the CUI. Then, any other 
command may be issued to the CUI. Note again that 
before a read cycle can be initiated, a Read com- 
mand must be written to the CUI to specify whether 
the read data is to come from the array, status regis- 
ter, or Intelligent Identifier. 


Program is executed by a two-write sequence. The 
Program Setup command is written to the CUI fol- 
lowed by a second write which specifies the address 
and data to be programmed. The write state ma- 
chine will execute a sequence of internally timed 
events to: 
1. program the desired bits of the addressed memo- 


ry word (byte), and 
2. verify that the desired bits are sufficiently pro- 


grammed. 


Programming of the memory results in specific bits 
within a byte or word being changed to a "0". 


If the user attempts to program "1"s, there will be no 
change of the memory cell content and no error oc- 
curs. 


Similar to erasure, the status register indicates 
whether programming is complete. While the pro- 
gram sequence is executing, bit 7 of the status regis- 
ter is a "0". The status register can be polled by 
toggling either CE# or OE# to determine when the 
program sequence is complete. Only the Read 
Status Register command is valid while program- 
ming is active. 


When programming is complete, the status bits, 
which indicate whether the program operation was 
successful, should be checked. If the programming 
operation was unsuccessful, Bit 4 of the status regis- 
ter is set to a "1" to indicate a Program Failure. If 
Bit 3 is set then Vpp was not within acceptable limits, 
and the WSM will not execute the programming se- 
quence. 


The status register should be cleared before at- 
tempting the next operation. Any CUI instruction can 
follow after programming is completed; however, it 
must be recognized that reads from the memory, 
status register, or Intelligent Identifier cannot be ac- 
complished until the CUI is given the appropriate 
command. A Read Array command must first be giv- 
en before memory contents can be read. 


Figure 12 shows a system software flowchart for de- 
vice byte programming operation. Figure 13 shows a 
similar flowchart for device word programming oper- 
ation (28F400BX-L-only). 


Erasure of a single block is initiated by writing the 
Erase Setup and Erase Confirm commands to the 
CUI, along with the addresses, A[12:17] 
for the 
28F400BX·L or A[12:18] for the 28F004BX-L, identi- 
fying the block to be erased. These addresses are 
latched internally when the Erase Confirm command 
is issued. Block erasure results in all bits within the 
block being set to "1". 


The WSM will execute a sequence of internally 
timed events to: 
1. program all bits within the block 
2. verify that all bits within the block are sufficiently 
programmed 
3. erase all bits within the block and 
4. verify that all bits within the block are sufficiently 
erased 


While the erase sequence is executing, Bit 7 of the 
status register is a "0". 


When the status register indicates that erasure is 
complete, the status bits, which indicate whether the 
erase operation was successful, should be checked. 
If the erasure operation was unsuccessful, Bit 5 of 
the status register is set to a "1" 
to indicate an 


Erase Failure. If Vpp was not within acceptable limits 
after the Erase Confirm command is issued, the 
WSM will not execute an erase sequence; instead, 
Bit 5 of the status register is set to a "1" to indicate 
an Erase Failure, and Bit 3 is set to a "1" to identify 
that Vpp supply voltage was not within acceptable 
limits. 


The status register should be cleared before at- 
tempting the next operation. Any CUI instruction can 
follow after erasure is completed; however, it must 
be recognized that reads from the memory array, 
status register, or Intelligent Identifier can not be ac- 
complished until the CUI is given the appropriate 
command. A Read Array command must first be giv- 
en before memory contents can be read. 


Figure 13 shows a system software flowchart for 
Block Erase operation. 


4.4.5.1 Suspending 
and Resuming 
Erase 


Since an erase operation typically requires 2 sec- 
onds to 5 seconds to complete, an Erase Suspend 
command is provided. This allows erase-sequence 
interruption in order to read data from another block 
of the memory. Once the erase sequence is started, 
writing the Erase Suspend command to the CUI reo 
quests that the Write State Machine (WSM) pause 
the erase sequence at a predetermined point in the 
erase algorithm. The status register must be read to 
determine when the erase operation has been sus- 
pended. 


At this point, a Read Array command can be written 
to the CUI in order to read data from blocks other 
than that which is being suspended. The only other 
valid command at this time is the Erase Resume 
command or Read Status Register operation. 


Figure 14 shows a system software flowchart detail- 
ing the operation. 


During Erase Suspend mode, the chip can go into a 
pseudo-standby mode by taking CE# to VIH and the 
active current is now a maximum of 6 mA. If the chip 
is enabled while in this mode by taking CE# to VIL, 
the Erase Resume command can be issued to re- 
sume the erase operation. 


Upon completion of reads from any block other than 
the block being erased, the Erase Resume com- 
mand must be issued. When the Erase Resume 
command is given, the WSM will continue with the 
erase sequence and complete erasing the block. As 
with the end of erase, the status register must be 
read, cleared, and the next instruction issued in or- 
der to continue. 
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Intel has designed extended cycling capability into 
its ETOX III flash memory technology. The 4-Mbit 
low voltage flash memory family is designed for 
10,000 program/erase cycles on each of the seven 
blocks. The combination of low electric fields, clean 
oxide processing and minimized oxide area per 
memory cell subjected to the tunneling electric field, 
results in very high cycling capability. 


Bus 
Command 
Comments 
Operation 


Write 
Setup 
Data = 40H 


Program 
Address = Byte to be 
programmed 


Write 
Program 
Data to be programmed 


Address = Byte to be 
programmed 


Read 
Status Register Data. 
Toggle OE # or CE # to update 
Status Register 


Standby 
CheckSR.7 


1 = Ready, 0 = Busy 


Repeat for subsequent bytes. 


Full status check can be done after each byte or after a 
sequence of bytes. 


Write FFH after the last byte programming operation to 
reset the device to Read Array Mode. 


Bus 
Command 
Comments 
Operation 


Standby 
Check SR.3 
1 = Vpp Low Detect 


Standby 
Check SR.4 
1 = Byte Program Error 


SR.3 MUST be cleared, if set during a program attempt, 
before further attempts are allowed by the Write State 
Machine. 


SR.4 is only cleared by the Clear Status Register 
Command, in cases where multiple bytes are programmed 
before full status is checked. 


If error is detected, clear the Status Register before 
attempting retry or other error recovery. 
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Bus 
Command 
Comments 
Operation 


Write 
Setup 
Data = 40H 


Program 
Address = Word to be 
programmed 


Write 
Program 
Data to be programmed 
Address = Word to be 
programmed 


Read 
Status Register Data. 
ToggleOE# 
orCE# 
to update 


Status Register 


Standby 
Check SR.7 


1 = Ready, 0 = Busy 


Repeat for subsequent words. 


Full status check can be done after each word or after a 
sequence of words. 


Write FFH after the last word programming operation to 
reset the device to Read Array Mode. 


Bus 
Command 
Comments 
Operation 


Standby 
Check SR.3 


1 = Vpp Low Detect 


Standby 
Check SR.4 


1 = Byte Program Error 


SR.3 MUST be cleared, if set during a program attempt, 
before further attempts are allowed by the Write State 
Machine. 


SR.4 is only cleared by the Clear Status Register 
Command, in cases where multiple words are programmed 
before full status is checked. 


If error is detected, clear the Status Register before 
attempting retry or other error recovery. 


Bus 
Command 
Comments 
Operation 


Write 
Setup 
Data ~ 20H 


Erase 
Address = Within block to be 
erased 


Write 
Erase 
Data = DOH 


Address = Within block to be 
erased 


Read 
Status Register Data. 
Toggle DE # or CE # to update 
Status Register 


Standby 
Check SR.7 


1 = Ready, 0 = Busy 


Repeat for subsequent blocks. 


Full status check can be done after each block or after a 
sequence of blocks. 


Write FFH after the last block erase operation to reset the 
device to Read Array Mode. 


Bus 
Command 
Comments 
Operation 


Standby 
Check SR.3 
1 = Vpp Low Detect 


Standby 
Check SR.4,5 


Both 1 = Command Sequence 
Error 


Standby 
CheckSR.5 
1 = Block Erase Error 


SR.3 MUST be cleared, if set during an erase attempt, 
before further attempts are allowed by the Write State 
Machine. 


SR.5 is only cleared by the Clear Status Register 
Command, in cases where multiple blocks are erased 
before full status is checked. 


If error is detected, clear the Status Register before 
attempting retry or other error recovery. 
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Bus 
Commsnd 
Comments 
Operation 


Write 
Erase 
Data = SOH 


Suspend 


Read 
Status Register Data. 
ToggleOE# 
orCE# 
to 


update Status Register 


Standby 
Check SR.? 


1 = Ready 


Standby 
CheckSR.6 
1 = Suspended 


Write 
Read Array 
Data = FFH 


Read 
Read array data from block 
other than that being 
erased. 


Write 
Erase Resume 
Data = DOH 


4.5.1 ACTIVE POWER 


With CE# at a logic-low level and RP# at a logic- 
high level, the device is placed in the active mode. 
The device Icc current is a maximum of 22 mA at 
5 MHz. 


4.5.2 AUTOMATIC POWER SAVINGS 


Automatic Power Savings (APS) is a low power fea- 
ture during active mode of operation. The 4-Mbit 
family of products incorporate Power Reduction 
Control (PRC)circuitry which basically allows the de- 
vice to put itself into a low current state when it is 
not being accessed. After data is read from the 
memory array, PRC logic controls the device's pow- 
er consumption by entering the APS mode where 


typical Icc current is 0.8 mA and maximum ICCc~r- 
rent is 2 mA. The device stays in this static state with 
outputs valid until a new memory location is read. 


4.5.3 STANDBY POWER 


With CE# at a logic-high level (VtH), and the CUI 
read mode, the memory is placed in standby mode 
where the maximum Icc standby current is 120 /LA 
with CMOS input signals. The standby operation dis- 
ables much of the device's circuitry and substantially 
reduces device power consumption. The outputs 
(00[0:15] 
or 00[0:7] 
are placed in a high-imped- 


ance state independent of the status of the OE# 
signal. When the 4-Mbit flash family is deselected 
during erase or program functions, the devices will 
continue to perform the erase or program function 
and consume program or erase active power until 
program or erase is completed. 
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The 4-Mbit flash family supports a typical Ice of 
0.2 /LAin deep power-down mode. One of the target 
markets for these devices is in portable equipment 
where the power consumption of the machine is of 
prime importance. The 4-Mbit flash family has a 
RP# pin which places the device in the deep power- 
down mode. When RP# 
is at a logic-low (GND 
± 0.2V), all circuits are turned off and the device typ- 
ically draws 0.2 /LA of Vee current. 


During read modes, the RP# pin going low dese- 
lects the memory and places the output drivers in a 
high impedance state. Recovery from the deep pow- 
er-down state, requires a minimum of 700 ns to ac- 
cess valid data (tpHQY). 


During erase or program modes, RP# low will abort 
either erase or program operation. The contents of 
the memory are no longer valid as the data has been 
corrupted by the RP# function. As in the read mode 
above, all internal circuitry is turned off to achieve 
the 0.2 /LAcurrent level. 


RP# transitions to VIL or turning power off to the 
device will clear the status register. 


This use of RP# during system reset is important 
with automated write/erase devices. When the sys- 
tem comes out of reset it expects to read from the 
flash memory. Automated flash memories provide 
status information when accessed during write/ 
erase modes. If a CPU reset occurs with no flash 
memory reset, proper CPU initialization would not 
occur because the flash memory would be providing 
the status information instead of array data. Intel's 
Flash Memories allow proper CPU initialization fol- 
lowing a system reset through the use of the RP# 
input. In this application RP# is controlled by the 
same RESET# signal that resets the system CPU. 


4.6 Power-up 
Operation 


The 4-Mbit flash mem<;>ryfamily is designed to offer 
protection against accidental block erasure or pro- 
gramming during power transitions. Upon power-up 
the 4-Mbit flash memory family is indifferent as to 
which power supply, Vpp or Vee, powers-up first. 
Power supply sequencing is not required. 


The 4-Mbit flash memory family ensures the CUI is 
reset to the read mode on power-up. 


In addition, on power-up the user must either drop 
CE# low or present a new address to ensure valid 
data at the outputs. 


A system designer must guard against spurious 
writes for Vee voltages above VLKO when Vpp is 


active. Since both WE# and CE# must be low for a 
command write, driving either signal to VIHwill inhibit 
writes to the device. The CUI architecture provides 
an added level of protection since alteration of mem- 
ory contents can only occur after successful com- 
pletion of the two-step command sequences. Finally 
the device is disabled until RP# is brought to VIH, 
regardless of the state of its control inputs. This fea- 
ture provides yet another level of memory protec- 
tion. 


Flash memory's power switching characteristics re- 
quire careful device decoupling methods. System 
designers are interested in 3 supply current issues: 


• Standby current levels (Ices) 
• Active current levels (leeR) 
• Transient peaks produced by falling and rising 


edges of CE# . 


Transient current magnitudes depend on the device 
outputs' capacitive and inductive loading. Two-line 
control and proper decoupling capacitor selection 
will suppress these transient voltage peaks. Each 
flash device should have a 0.1 /LFceramic capacitor 
connected between each Vee and GND, and be- 
tween its Vpp and GND. These high frequency, low- 
inherent inductance capacitors should be placed as 
close as possible to the package leads. 


4.7.1 Vpp TRACE 
ON PRINTED 
CIRCUIT 
BOARDS 


Writing to flash memories while they reside in the 
target system, requires special consideration of the 
Vpp power supply trace by the printed circuit board 
designer. The Vpp pin supplies the flash memory 
cell's current for programming and erasing. One 
should use similar trace widths and layout consider- 
ations given to the Vee power supply trace. Ade- 
quate Vpp supply traces and decoupling will de- 
crease spikes and overshoots. 


The CUI latches commands as issued by system 
software and is not altered by Vpp or CE# tran- 
sitions or WSM actions. Its state upon power-up, af- 
ter exit from deep power-down mode or after Vee 
transitions below VLKO (Lockout voltage), is Read 
Array mode. 


After any word/byte write or block erase operation is 
complete and even after Vpp transitions down to 
VPPL,the CUI must be reset to Read Array mode via 
the Read Array command when accesses to the 
flash memory are desired. 
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NOTICE: This data sheet contains 
preliminary infor- 


mation on new products in production. The specifica- 
tions are subject to change without notice. Verify with 
your local Intel Sales office that you have the latest 
data sheet before finalizing a design. 


• WARNING: Stressing the device beyond the "Absolute 
Maximum 
Ratings" 
may 
cause 
permanent 
damage. 


These are stress ratings 
only. Operation 
beyond 
the 
"Operating 
Conditions" 
is not recommended 
and ex- 


tended 
exposure 
beyond 
the 
"Operating 
Conditions" 


may affect device reliability. 


Operating 
Temperature 
During Read 
o·C to + 70·C(1) 
During Block Erase/Byte 
Write 
O·C to + 70·C 


Temperature 
Under Bias 
-1 O·C to + BO·C 


Storage Temperature 
- 65°C to + 125·C 


Voltage 
on any Pin 
(except 
Vcc. 
Vpp, Ag and RP#) 


with Respect 
to GND 
- 2.0V to + 7.0V(2) 


Voltage 
on Pin RP# 
or Pin Ag 


with Respect 
to GND 
..... 
- 2.0V to + 13.5V(2, 3) 


Vcc 
Program 
Voltage 
with 
Respect 
to GND 
during 
Block 
Erase and 


Word/Byte 
Write 
- 2.0V to + 14.0V(2, 3) 


Vcc 
Supply Voltage 
with Respect 
to GND 
- 2.0V to + 7.0V(2) 


Output Short Circuit Current 
100 mA(4) 


NOTES: 
1. Operating temperature is for commercial product defined by this specification. 
2. Minimum DC voltage is -0.5V 
on input/output pins. During transitions, this level may undershoot to -2.0V 
for periods 
<20 ns. Maximum DC voltage on input/output pins is Vcc + 0.5V which during transitions may overshoot to Vcc + 2.0V 
for periods < 20 ns. 
3. Maximum DC voltage on Vpp may overshoot to +14.0V for periods <20 ns. Maximum DC voltage on RP# or A9 may 
overshoot to 13.5V for periods < 20 ns. 
4. Output shorted for no more than one second. No more than one output shorted at a time. 
5. AC specifications are valid at both voltage ranges. See DC Characteristics tables for voltage range-specific specifications. 


Symbol 
Parameter 
Notes 
Mln 
Max 
Unit 


TA 
Operating 
Temperature 
0 
70 
·C 


Vcc 
Vcc Supply Voltage 
5 
3.00 
3.60 
V 


Vcc 
Vcc Supply Voltage 
5 
4.50 
5.50 
V 


Symbol 
Parameter 
Notes 
Mln 
Typ 
Max 
Unit 
Test Conditions 


III 
Input Load Current 
1 
± 1.0 
/LA 
Vcc = VccMax 
VIN = Vcc or GND 


ILa 
Output 
Leakage Current 
1 
±10 
/LA 
Vcc = VccMax 
VOUT = Vcc or GND 


Iccs 
Vcc Standby Current 
1.3 
45 
120 
/LA 
Vcc = VccMax 
CE# = RP# = VIH 


45 
120 
/LA 
Vcc = VccMax 
CE# = RP# = Vcc 
±0.2V 


28F400BX: 


"'. 
BYTE# 
= Vcc 
±0.2Vor 
GND 


Symbol 
Parameter 
Notes 
Mln 
Typ 
Max 
Unit 
Test Conditions 


IceD 
Vee Deep Power-Down 
Current 
1 
0.20 
1.2 
IJ-A RP# = GND ±0.2V 


leeR 
Vee Read Current for 
1 
15 
25 
mA Vee = Vee Max, CE# 
= GND 
28F400BX-L 
Word-Wide 
and 
5,6 
f = 5 MHz, lOUT = 0 mA 
Byte·Wide-MOOe 
and 
CMOS Inputs 
28F004BX-L 
Byte-Wide 
Mode 
15 
25 
mA Vee = Vee Max. CE# 
= VIL 
f = 5 MHz. lOUT = 0 mA 
TTL Inputs 


leew 
Vee Word Write Current 
1 
30 
mA Word Write in Progress 


leew 
Vee Byte Write Current 
1 
30 
mA Byte Write in Progress 


IeeE 
Vee Block Erase Current 
1 
20 
mA Block Erase in Progress 


leeES 
Vee Erase Suspend 
Current 
1,2 
3 
6 
mA Block Erase Suspended, 
CE# 
= VIH 


IpPS 
Vpp Standby Current 
1 
±15 
IJ-A Vpp ~ Vee 


Ippo 
Vpp Deep Power-Down 
Current 
1 
5.0 
IJ-A RP# = GND ±0.2V 


IpPR 
Vpp Read Current 
1 
200 
IJ-A Vpp> 
Vee 


Ippw 
Vpp Word Write Current 
1 
40 
mA Vpp = VpPH 
Word Write in Progress 


Ippw 
Vpp Byte Write Current 
1 
30 
mA Vpp = VPPH 
Byte Write in Progress 


IpPE 
Vpp Block Erase Current 
1 
30 
mA Vpp = VPPH 
Block Erase in Progress 


IpPES 
Vpp Erase Suspend 
Current 
1 
200 
IJ-A Vpp = VPPH 
Block Erase Suspended 


IRP'" 
RP# 
Boot Block Unlock Current 
1,4 
500 
IJ-A RP# 
= VHH 


110 
Ag Intelligent 
Identifier 
Current 
1,4 
500 
IJ-A Ag = VIO 


VIO 
Ag Intelligent 
Identifier Voltage 
11.4 
12.0 
13.0 
V 


VIL 
Input Low Voltage 
-0.5 
0.6 
V 


VIH 
Input High Voltage 
2.0 
Vee + 0.5 
V 


VOL 
Output 
Low Voltage 
0.4 
V 
Vee = VeeMin 
IOL = 2 mA 


VOH 
Output High Voltage 
2.4 
V 
Vee = VeeMin 
IOH = -2 
mA 


VPPL 
Vpp during Normal Operations 
3 
0.0 
4.1 
V 


VPPH 
Vpp during Erase/Write 
Operations 
11.4 
12.0 
12.6 
V 


VLKO 
Vee Erase/Write 
Lock Voltage 
2.0 
V 


VHH 
RP# 
Unlock Voltage 
11.4 12.0 
13.0 
V 
Boot Block Write/Erase 


Symbol 
Parameter 
Typ 
Max 
Unit 
Condition 


CIN 
Input Capacitance 
6 
8 
pF 
VIN = OV 


COUT 
Output Capacitance 
10 
12 
pF 
VOUT = OV 


NOTES: 
1. All currents 
are in RMS unless 
otherwise 
noted. 
Typical 
values 
at VCC = 3.3V, VPP = 12.0V, T = 2S"C. These 
currents 


are valid for all product 
versions 
(packages 
and speeds). 


2. ICCES is specified 
with the device 
deselected. 
If the device 
is read while 
in Erase Suspend 
Mode, 
current 
draw is the sum 


of ICCES and ICCR. 
3. Block 
Erase and Word/Byte 
Writes 
are inhibited 
when 
VPP = VPPL and not guaranteed 
in the range 
between 
VPPH and 


VPPL· 
4. Sampled, 
not 100% 
tested. 
5. Automatic 
Power Savings 
(APS) reduces 
ICCR to less than 2 mA in static 
operation. 
6. CMOS 
Inputs are either 
Vcc 
±0.2V 
or GND 
±0.2V. 
TTL Inputs are either 
VIL or VIH. 


Symbol 
Parameter 
Notes 
Mln 
Typ 
Max 
Unit 
Test Conditions 


III 
Input Load Current 
1 
±1.0 
IJ-A Vee = VeeMax 


VIN = Vee or GND 


ILO 
Output Leakage Current 
1 
±10 
IJ-A Vee = VeeMax 


VOUT = Vee or GND 


lees 
Vee Standby 
Current 
1 
1.5 
mA 
Vee = VeeMax 
CE# 
= RP# 
= VIH 


100 
IJ-A Vee = VceMax 


CE# 
= RP# 
= Vee ±0.2V 


le.eD 
Vee Deep Power-Down 
Current 
1 
1.2 
IJ-A 
RP# = GND ±0.2V 


lOUT = 0 mA 


leeR 
Vee Read Current for 
1 
45 
mA 
Vee = Vee Max, CE# 
= GND 
28F400BX-L 
Word-Wide 
Mode 
f = 5 MHz, lOUT = 0 mA 
CMOS Inputs 


45 
mA 
Vee = Vee Max, CE# 
= VIL 
f = 5 MHz, lOUT = 0 mA 
TTL Inputs 


leeR 
Vee Read Current for 
1 
40 
mA 
Vee = Vee Max, CE# 
= GND 
28F400BX-L 
Byte-Wide 
Mode 
f = 5 MHz, lOUT = 0 mA 
and 28F004BX-L 
CMOS Inputs 


40 
mA 
Vee = Vee Max, CE# 
= VIL 
f = 5 MHz, lOUT = 0 mA 
TTL Inputs 


leew 
Vee Word Byte Write Current 
1 
70 
mA 
Word Write in Progress 


IeeE 
Vee Block Erase Current 
1 
30 
mA 
Block Erase in Progress 


leeES 
Vee Erase Suspend 
Current 
1,2 
10 
mA 
Block Erase Suspended, 
CE# 
= VIH 


Ipps 
Vpp Standby 
Current 
1 
±10 
IJ-A Vpp ~ Vee 


IpPD 
Vpp Deep Power-Down 
Current 
1 
5.0 
IJ-A RP# = GND ±0.2V 


IpPR 
Vpp Read Current 
1 
200 
IJ-A Vpp> 
Vee 


Ippw 
Vpp Word Write Current 
1 
40 
mA 
Vpp = VPPH 
Word Write in Progress 


Ippw 
Vpp Byte Write Current 
1 
30 
mA 
Vpp = VPPH 
Byte Write in Progress 


IpPE 
Vpp Block Erase Current 
1 
30 
mA 
Vpp = VPPH 
Block Erase in Progress 


IpPES 
Vpp Erase Suspend 
Current 
1 
200 
IJ-A Vpp = VPPH 
Block Erase Suspended 


IRP# 
RP# 
Boot Block 
1,4 
500 
IJ-A RP# = VHH 
Unlock Current 


liD 
Ag Intelligent 
1,4 
IJ-A Ag = VID 
Identifier 
Current 


VID 
Ag Intelligent 
11.4 
12.0 
13.0 
V 
Identifier 
Voltage 


Symbol 
Parameter 
Notes 
Mln 
Typ 
Max 
Unit 
Test Condition 


VIL 
Input Low Voltage 
-0.5 
0.8 
V 


VIH 
Input High Voltage 
2.0 
Vcc + 0.5 
V 


VOL 
Output Low Voltage 
0.45 
V 
Vcc = VccMin 
IOL = 5.8mA 


VOH 
Output High Voltage 
2.4 
V 
VCC = VCCMin 
IOH = -2.5 
mA 


VPPL 
Vpp during Normal Operations 
3 
0.0 
6.5 
V 


VPPH 
Vpp during Erase/Write 
Operations 
11.4 
12.0 
12.6 
V 


VLKO 
Vcc Erase/Write 
Lock Voltage 
2.2 
V 


VHH 
RP# Unlock Voltage 
11.4 
12.0 
13.0 
V 
Boot Block Write/Erase 


NOTES: 
1. All currents 
are in RMS unless 
otherwise 
noted. 
Typical 
values 
at Vcc = 5.0V, VPP = 12.0V, T = 25'C. 
These 
currents 
are valid for all product 
versions 
(packages 
and speeds). 


2. ICCES is specified 
with the device 
deselected. 
If the device 
is read while 
in Erase Suspend 
Mode, 
current 
draw is the sum 
of ICCES and ICCR' 
3. Block 
Erases 
and Word/Byte 
Writes 
are inhibited 
when 
VPP = VPPL and not guaranteed 
in the range 
between 
VPPH and 
VPPL· 
4. All parameters 
are sampled, 
not 100% 
tested. 


3.0 --I-NPU-T"'XU 
_ 
T£ST:~INTS 
-Xu 
OUTPUT 


0.0 
Ii 
290450-16 
AC test 
inputs 
are driven 
at 3.0V 
for a Logic 
"1" 
and 
0.0 for a Logic 
"0". 
Input timing 
begins, 
and output 
timing 
ends 
at 1.5V. Input rise and fall times 
(10% 
to 90%) 
< 3 ns. 


DEVICE 


UNDER 
TEST 


CL = 50 pF 
CL Includes 
Jig Capacitance 
RL = 3.3 KO 
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Versions 
28F400BX·L 
150 


28F004BX·L 
150 
Unit 


Symbol 
Parameter 
Notes 
Mln 
Max 


tAvAV 
tRC 
Read Cycle Time 
150 
ns 


tAVQV 
tACC 
Address 
to Output Delay 
150 
ns 


tELQV 
tCE 
CE # to Output Delay 
2 
150 
ns 


tpHQV 
tpWH 
RP# 
High to Output Delay 
600 
ns 


tGLQV 
toE 
OE # to Output Delay 
2 
65 
ns 


tELQX 
tLZ 
CE # to Output Low Z 
3 
0 
ns 


tEHOZ 
tHZ 
CE # High to Output High Z 
3 
55 
ns 


tGLQX 
tOLZ 
OE # to Output Low Z 
3 
0 
ns 


tGHQZ 
tOF 
OE # High to Output High Z 
3 
45 
ns 


toH 
Output Hold from Addresses, 
CE # or OE # 
3 
0 
ns 
Change, Whichever 
is First 


tELFL 
CE # to BYTE # Switching 
3 
5 
ns 


tELFH 
Low or High 


tFHQV 
BYTE # Switching 
High 
3,4 
150 
ns 
to Valid Output Delay 


tFLQZ 
BYTE # Switching 
Low 
3 
45 
ns 
to Output High Z 


NOTES: 
1. See AC Input/Output Reference Waveform for timing measurements. 
2. OE# may be delayed up to teE·toE after the falling edge of CE# without impact on teE. 
3. Sampled, not 100% tested. 
4. tFLOV,BYTE# switching low to valid output delay will be equal to tAVOV,measured from the time OQ15/A.1 becomes 
valid. 
• 
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V,H 


ADDRESSES(A) 


VIL 


V,H 


CEO (C) 


VIL 


V,H 


DE' 
(G) 


VIL 
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Verslons(4) 
28F400BX·L 
150 


28F004BX·L 
150 
Unit 


Symbol 
Parameter 
Notes 
Mln 
Max 


tAVAV 
twc 
Write Cycle Time 
150 
ns 


tpHWL 
tps 
RP# 
High Recovery 
1.0 
IJ-s 


to WE # Going Low 


tELWL 
tes 
CE # Setup to WE # 
0 
ns 


Going Low 


tpHHWH 
tpHS 
RP # VHH Setup to WE # 
6,8 
200 
ns 


Going High 


tVPWH 
tvps 
Vpp Setup to WE # Going High 
5,8 
200 
ns 


tAVWH 
tAS 
Address 
Setup to WE # 
3 
95 
ns 


Going High 


tDVWH 
tDS 
Data Setup to WE # Going High 
4 
100 
ns 


tWLWH 
twP 
WE # Pulse Width 
100 
ns 


tWHDX 
tDH 
Data Hold from WE # High 
4 
0 
ns 


WE# 
High 


tWHAX 
tAH 
Address 
Hold from WE# 
High 
3 
10 
ns 


tWHEH 
teH 
CE # Hold from WE # High 
10 
ns 


tWHWL 
tWPH 
WE # Pulse Width High 
50 
ns 


tWHOV1 
Duration of Word/Byte 
2,5,6 
6 
IJ-s 


Programming 
Operation 


tWHOV2 
D"uration of Erase 
2,5,6 
0.3 
s 


Operation 
(Boot) 


tWHOV3 
Duration of Erase 
2,5,6 
0.3 
s 


Operation 
(Parameter) 


tWHOV4 
Duration of Erase 
2,5,6 
0.6 
s 


Operation 
(Main) 


taWL 
tVPH 
Vpp Hold from Valid SRD 
5,8 
0 
ns 


taVPH 
tpHH 
RP# 
VHH Hold from Valid SRD 
6,8 
0 
ns 


tpHBR 
Boot-Block 
Relock Delay 
7,8 
200 
ns 


NOTES: 
1. Read timing characteristics during write and erase operations are the same as during read-only operations. Refer to AC 
Characteristics during Read Mode. 
2. The on-chip WSM completely automates program/erase operations; program/erase algorithms are now controlled inter- 
nally which includes verify and margining operations. 
3. Refer to command definition table for valid AIN. 
4. Refer to command definition table for valid DIN. 
5. Program/Erase durations are measured to valid SRD data (successful operation, SR.7= 1). 
6. For Boot Block Program/Erase, PWD# should be held at VHH until operation completes successfully. 
7. Time tpHBRis required for successful relocking of the Boot Block. 
8. Sampled but not 100% tested. 


- 
- 
28F400BX·L 
150 


Parameter 
Notes 
28F004BX·L 
150 
Unit 


Min 
Typ(1) 
Max 


Boot/Parameter 
Block Erase Time 
2 
2.0 
8.6 
s 


Main Block Erase Time 
2 
3.4 
17.0 
s 


Main Block Byte Program Time 
2 
1.4 
5.3 
s 


Main Blok Word Program Time 
2 
0.7 
2.7 
s 


NOTES: 
1. 25°C, 12.0V Vpp. 
2. Excludes 
System-Level 
Overhead. 
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WRITE 


WRITE 
PROGRAM 
OR 
VALID 
ADDRESS 
Ie 
DATA (PROGRAM) 
AUTOMATED 
PROGRAM 


ERASE 
SETUP 
COMMAND 
OR ERASE 
CONFIRM 
COMMAND 
OR ERASE 
DELAY 


--€: 


A.C. CHARACTERISTICS 
FOR CE#-CONTROLLED 
WRITE 
OPERATIONS 
vcc 
= 3.3V ± 0.3V, 5.0V ± 10% 


Versions 
28F400BX·L 
150 
28F004BX·L 
150 
Unit 


Symbol 
Parameter 
Notes 
Mln 
Max 


tAVAV 
twc 
Write Cycle Time 
150 
ns 


tpHEL 
tps 
RP# 
High Recovery 
to 
1.0 
JLs 
CE # Going Low 


tWLEL 
tws 
WE # Setup to CE # Going Low 
0 
ns 


tpHHEH 
tpHS 
RP# 
VHH Setup to CE# 
Going High 
6,8 
200 
ns 


tVPEH 
tvps 
VPP Setup to CE# 
Going High 
5,8 
200 
ns 


tAVEH 
tAS 
Address 
Setup to CE # Going High 
3 
95 
ns 


tOVEH 
tos 
Data Setup to CE # Going High 
4 
100 
ns 


tELEH 
tep 
CE # Pulse Width 
100 
ns 


tEHOX 
tOH 
Data Hold from CE # High 
4 
0 
ns 


tEHAX 
tAH 
Address 
Hold from CE # High 
3 
10 
ns 


tEHWH 
tWH 
WE # Hold from CE # High 
10 
ns 


tEHEL 
tePH 
CE # Pulse Width High 
50 
ns 


tEHOV1 
Duration of Programming 
2,5,6 
6 
JLs 
Operation 
Word/Byte 


tEHOV2 
Duration of Erase Operation 
(Boot) 
2,5,6 
0.3 
s 


tEHOV3 
Duration of Erase 
2,5,6 
0.3 
s 
Operation 
(Parameter) 


tEHOV4 
Duration of Erase Operation 
(Main) 
2,5,6 
0.6 
s 


taWL 
tVPH 
VPP Hold from Valid SRD 
5,8 
0 
ns 


taVPH 
tpPH 
RP# 
VHH Hold from Valid SRD 
6,8 
0 
ns 


tpHBR 
Boot-Block 
Relock Delay 
7,8 
200 
ns 


NOTES: 
1. Chip-Enable Controlled Writes: Write operations are driven by the valid combination of CEII and WEII in systems where 
CEil defines the write pulse-width (within a longer WEll timing waveform), all set-up, hold and inactive WEll times should 
be measured relative to the CEII waveform. 
2,3,4,5,6,7,8. 
Refer to A.C. Characteristics for WEll-Controlled Write operations. 


9. Read timing characteristics during write and erase operations are the same as during read-only operations. Refer to AC 
Characteristics during Read Mode. 
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WRITE 


WRITE 
PROGRAM 
OR 
VALID 
ADDRESS 
a: DATA (PROGRAM) 
AUTOMATED 
PROGRAM 
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OR ERASE 
CONfiRM 
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PACKAGE 
E 
= STANDARD 
56 
LEAD 
TSOP 


PA = 44 
LEAD 
PSOP 


~ 
ACCESS 
SPEED (ns) 
150 ns 


VALID 
COMBINATIONS: 
E28F400BX·L150 
PA28F400BX·L150 


y 


PACKAGE 
E 
= STANDARD 
40 
LEAD 
TSOP 


~ 
ACCESS 
SPEED (ns) 
150 ns 


VALID 
COMBINATIONS: 
E28F004BX·L150 


ADDITIONAL 
INFORMATION 
28F200BX/28F002BX 
Data Sheet 
28F200BXL/28F002BXL 
Data Sheet 
28F400BX/28F004BX 
Data Sheet 


Order Number 
290448 
290449 
290451 


AP-363 
"Ex1ended 
Flash BIOS Design for Portable 
Computers" 
AP-357 
"Power 
Supply Solutions 
for Flash Memory 
ER-28 "ETOX-1I1 Flash Memory Technology" 
ER-29 "The 
Intel2/4-Mbit 
Boot Block Flash Memory 
Family" 


292098 
292092 
294012 
294013 


Number 
Description 


-001 
Original Version 


-002 
Modified 
BYTE # Timing Waveforms 
Modified 
tOVWH parameter 
for AC Characteristics 
for Write Operations 


-003 
PWD renamed 
to RP# for JEDEC standarization 
compatibility. 


Combined 
Vcc Read Current for 28F400BX-L 
Word-Wide 
and Byte-Wide 
Mode 
and 28F004BX·L 
Byte Wide Mode in DC Characteristics 
tables. 


Changed 
IPPScurrent spec from ± 10 1J.Ato ± 15 1J.Ain DC Characteristics 
table. 


Added Boot Block Unlock current spec in DC Characteristics 
tables. 


Improved 
tpWH spec to 600 ns (was 700 ns). 


Changed 
ICCR maximum 
spec from 20 mA to 25 mA. and added 15 mA typical spec 
in DC Characteristics 
Table. 


• 


28F200BX-T/B,28F002BX-T/B 
2-MBIT (128K x 16, 256K x 8) BOOT BLOCK 


FLASH MEMORY FAMILY 


• 
x8/x16 Input/Output 
Architecture 
- 
28F200BX-T, 28F200BX-B 
- 
For High Performance and High 
Integration 
16-bit and 32-bit CPUs 


• 
x8-only Input/Output 
Architecture 
- 
28F002BX-T 28F002BX-B 
- 
For Space Constrained 
8-bit 
Applications 


• 
Optimized High Density Blocked 
Architecture 
- 
One 16-KB Protected Boot Block 
- 
Two 8-KB Parameter Blocks 
- 
One 96-KB Main Block 
- 
One 128 KB Main Block 
- 
Top or Bottom Boot Locations 


• 
Extended Cycling Capability 
-100,000 
Block Erase Cycles 


• 
Automated 
Word/Byte 
Write and 
Block Erase 
- 
Command User Interface 
- 
Status Registers 
- 
Erase Suspend Capability 


• 
SRAM-Compatible Write Interface 


• 
Automatic 
Power Savings Feature 
- 
1 mA Typical lee Active Current In 
Static Operation 


• 
Hardware Data Protection 
Feature 
- 
Erase/Write 
Lockout during Power 
Transitions 


• 
Very High-Performance 
Read 


- 
60/80 ns Maximum Access Time 
- 
30/40 ns Maximum Output Enable 
Time 


• 
Low Power Consumption 
- 
20 mA Typical x8 Active Read 
Current 
- 
25 mA Typical x16 Active Read 
Current 


• 
Reset/Deep 
Power-Down Input 


- 
0.2 J-LAlee Typical 
- 
Acts as Reset for Boot Operations 


• 
Extended Temperature Operation 
- 
- 40°C to + 85°C 


• 
Write Protection 
for Boot Block 


• 
Industry Standard Surface Mount 
Packaging 
- 
28F200BX: JEDEC ROM Compatible 
44-Lead PSOP 
56-Lead TSOP 


- 
28F002BX: 40-Lead TSOP 


• 
12V Word/Byte 
Write and Block Erase 
- 
Vpp = 12V ±5% Standard 


- 
Vpp = 12V ± 10% Option 


• 
ETOX III Flash Technology 
-5V 
Read 


• 
Independent Software Vendor Support 


Intel's 2-Mbit Flash Memory Family is an extension of the Boot Block Architecture which includes block-selec- 
tive erasure, automated write and erase operations and standard microprocessor interface. The 2-Mbit Flash 
Memory Family enhances the Boot Block Architecture by adding more density and blocks, x8/x16 input/out- 
put control, very high speed, low power, an industry standard ROM compatible pinout and surface mount 
packaging. The 2-Mbit flash family allows for an easy upgrade to Intel's 4-Mbit Boot Block Flash Memory 
Family. 


The Intel 28F200BX-T/B are 16-bit wide flash memory offerings. These high density flash memories provide 
user selectable bus operation for either 8-bit or 16-bit applications. The 28F200BX·T and 28F200BX-B are 
2,097,152-bit non-volatile memories organized as either 262,144 bytes or 131,072 words of information. They 
are offered in 44-Lead plastic SOP and 56-Lead TSOP packages. The x8/x16 pinout conforms to the industry 
standard ROM/EPROM pinout. 


The Intel 28F002BX-T/B are 8-bit wide flash memories with 2,097,152 bits organized as 262,144 bytes of 
information. They are offered in a 40-Lead TSOP package, which is ideal for space-constrained portable 
systems. 


These devices use an integrated Command User Interface (CUI)and Write State Machine (WSM) for simplified 
word/byte write and block erasure. The 28F200BX-T/28F002BX-T provide block locations compatible with 
Intel's MCS-186 family, 80286, i386™, i486™, i860™ and 80960CA microprocessors. The 28F200BX-B/ 
28F002BX-B provide compatibility with Intel's 80960KX and 80960SX families as well as other embedded 
microprocessors. 


The boot block includes a data protection feature to protect the boot code in critical applications. With a 
maximum access time of 60 ns, these 2-Mbit flash devices are very high performance memories which 
interface at zero-wait-state to a wide range of microprocessors and microcontrollers. A deep power-down 
mode lowers the total Vcc power consumption to 1 JLW typical. This is critical in handheld battery powered 4 
systems. For very low power applications using a 3.3V supply, refer to the Intel 28F200BX-TL/BL, 28F002BX- 
TL/BL 2-Mbit Boot Block Flash Memory Family datasheet. 


Manufactured on Intel's 0.8 micron ETOXIII process, the 2-Mbit flash memory family provides world class 
quality, reliability and cost-effectiveness at the 2-Mbit density level. 


Throughout this datasheet the 28F200BX refers to 
both the 28F200BX-T and Q8F200BX-Bdevices and 
28F002BX refers to 
both the 28F002BX-T and 
28F002BX-B devices. The 2-Mbit flash memory fam- 
ily refers to both the 28F200BX and 28F002BX prod- 
ucts. This datasheet comprises the specifications for 
four separate products in the 2-Mbit flash memory 
family. Section 1 provides an overview of the 2-Mbit 
flash memory family including applications, pinouts 
and pin descriptions. Sections 2 and 3 describe in 
detail the specific memory organizations for the 
28F200BX and 28F002BX products respectively. 
Section 4 combines a description of the family's 
principles of operations. Finally Section 5 describes 
the family's operating specifications. 


xS/x16 
Products 
xS-Only Products 


28F200BX-T 
28F002BX-T 


28F200BX-B 
28F002BX-B 


1.1 Main Features 


The 28F200BX/28F002BX boot block flash memory 
family is a very high performance 2-Mbit (2,097,152 
bit) memory family organized as either 128 KWords 
(131,072 words) of 16 bits each or 256 Kbytes 
(262,144 bytes) of 8 bits each. 


Five Separately 
Erasable 
Blocks including a hard- 
ware-lockable 
boot block (16,384 Bytes), two pa- 
rameter 
blocks (8,192 Bytes each) and two 
main 
blocks 
(1 block of 98,304 Bytes and 1 block of 
131,072 Bytes) are included on the 2-Mbit family. An 
erase operation erases one of the main blocks in 
typically 2.4 seconds, and the boot or parameter 
blocks in typically 1.0 second. Each block can be 
independentlY erased and programmed 100,000 
times. 


The 
Boot 
Block 
is located 
at either the top 
(28F200BX-T, 
28F002BX-T) 
or 
the 
bottom 
(28F200BX-B, 28F002BX-B) of the address map in 
order to accommodate different microprocessor pro- 
tocols for boot code location. The hardware 
locka- 
ble boot block provides the most secure code stor- 
age. The boot block is intended to store the kernel 
code required for booting-up a system. When the 
RP# pin is between 11.4V and 12.6V the boot block 
is unlocked and program and erase operations can 
be performed. When the RP# pin is at or below 6.5V 
the boot block is locked and program and erase op- 
erations to the boot block are ignored. 


intel~ 


The 28F200BX products are available in the ROMI 
EPROM compatible pinout and housed in the 44- 
Lead PSOP (Plastic Small Outline) package and the 
56-Lead TSOP (Thin Small Outline, 1.2mm thick) 
package 
as 
shown 
in 
Figures 3 
and 
4. The 
28F002BX products are available in the 40-Lead 
TSOP (1.2mm thick) package as shown in Figure 5. 


The Command 
User Interface 
(CUI) serves as the 
interface between the microprocessor or microcon- 
troller and the internal operation of the 28F200BX 
and 28F002BX flash memory products. 


Program 
and 
Erase 
Automation 
allows program 
and erase operations to be executed using a two- 
write command sequence to the CUI. The internal 
Write State Machine (WSM) automatically executes 
the algorithms and timings necessary for program 
and erase operations, including verifications, there- 
by unburdening the microprocessor or mbocontrol- 
ler. Writing of memory data is performed in word or 
byte increments for the 28F200BX family and in byte 
increments for the 28F002BX family typically within 
9 JLs which is a 100% improvement over current 
flash memory products. 


The Status Register 
(SR) indicates the status of the 
WSM and whether the WSM successfully completed 
the desired program or erase operation. 


Maximum Access Time of 60 ns (TACC) is achieved 
over the commercial temperature range (O·C to 
70·C), :i% 
Vcc 
supply voltage range (4.75V to 
5.25V) and 30 pF output load. Refer to Figure 19; 
TACCvs Output Load Capacitance for larger output 
loads. Maximum Access Time of SO ns (TACC) 
is 
achieved over the commercial temperature range, 
10% VCCsupply range (4.5V to 5.5V) and 100 pF 
output load. 


Ipp maximum 
Program 
current 
Is 40 mA for x16 
operation 
and 30 mA for xS operation. 
Ipp Erase 
current 
Is 30 mA maximum. 
Vpp erase 
and pro- 
gramming 
voltage 
Is 11.4V to 12.6V (Vpp = 12V 
±5%) 
under 
all operating 
conditions. 
As an op- 
tion, Vpp can also vary between 10.8V to 13.2V (Vpp 
= 12V ± 10%) with a guaranteed number of 100 
block erase cycles. 


Typical 
Ice Active 
Current 
of 25 mA is achieved 
for the x16 products (28F200BX), typical Ice Active 
Current 
of 20 mA is achieved for the x8 products 
(28F200BX, ;18F002BX).Refer to the Icc active cur- 
rent derating curves in this datasheet. 


The 2-Mbit boot block flash family is also designed 
with an Automatic Power Savings (APS) feature to 
minimize system battery current drain and allow for 
very low power designs. Once the device is ac- 


cessed to read array data, APS mode will immedi- 
ately put the memory in static mode of operation 
where Ice active current is typically 1 mA until the 
next read is initiated. 


When the CE# and RP# pins are at Vee and the 
BYTE# 
pin (28F200BX-only) is at either Vcc or 
GND the CMOS Standby mode is enabled where 
Ice is typically 50 /LA. 


A Deep Power-Down Mode is enabled when the 
RP# pin is at ground minimizing power consumption 
and providing write protection during power-up con- 
ditions. lee current during deep power-down mode 
is 0.20 /LA typical. An initial maximum access time 
or Reset Time of 300 ns is required from RP# 
switching until outputs are valid. Equivalently, the 
device has a maximum wake-up time of 215 ns until 
writes to the Command User Interface are recog- 
nized. When RP# is at ground the WSM is reset, the 
Status Register is cleared and the entire device is 
protected from being written to. This feature pre- 
vents data' corruption and protects the code stored 
in the device during system reset. The system Reset 
pin can be tied to RP# to reset the memory to nor- 
mal read mode upon activation of the Reset pin. 
With 
on-chip 
program/erase 
automation 
in the 
2-Mbit family and the RP# functionality for data pro- 
tection, when the CPU is reset and even if a program 
or erase command is issued, the device will not rec- 
ognize any operation until RP# returns to its normal 
state. 


For the 28F200BX, Byte-wide or Word-wide In- 
put/Output Control is possible by controlling the 
BYTE# pin. When the BYTE# pin is at a logic low 
the device is in the byte-wide mode (x8) and data is 
read and written through DO(O:7]. During the byte- 
wide mode, DO(8:14] are tri-stated and D015/A-1 
becomes the lowest order address pin. When the 
BYTE# pin is at a logic high the device is in the 
word-wide mode (x16) and data is read and written 
through DO(O:15]. 


The 2-Mbit boot plock flash family combines high 
density, high performance, cost-effective flash mem- 
ories with blocking and hardware protection capabili- 
ties. Its flexibility and versatility will reduce costs 
throughout the product life cycle. Flash memory is 
ideal for Just-In-Time production flow, reducing sys- 
tem inventory and costs, and eliminating component 
handling during the production phase. During the 
product life cycle, when code updates or feature en- 


hancements become necessary, flash memory will 
reduce the update costs by allowing either a user· 
performed code change via floppy di~k or a remote 
code change via a serial link. The 2-Mbit boot block 
flash family provides full function, blocked flash 
memories suitable for a wide range of applications. 
These applications include Extended PC BIOS, 
Digital Cellular Phone program and data storage, 
Telecommunication 
boot/firmware, 
and various 


other embedded applications where both program 
and data storage are required. 


Reprogrammable systems such as personal com- 
puters, are ideal applications for the 2-Mbit flash 
products. Portable and handheld personal computer 
applications are becoming more complex with the 
addition of power management software to take ad- 
vantage of the latest microprocessor technology, 
the availability of ROM-based application software, 
pen tablet code for electronic hand writing, and diag- 
nostic code. Figure 1 shows an example of a 
28F200BX-T application. 


This increase in software sophistication augments 
the probability that a code update will be required 
after the PC is shipped. The 2-Mbit flash products 
provide an inexpensive update solution for the note- 
book and handheld personal computers while ex- 
tending their 
product 
lifetime. 
Furthermore, the 


2-Mbit flash products' power-down mode provides 
added flexibility for these battery-operated portable 
designs which require operation at very low power 
levels. 


The 2·Mbit flash products also provide excellent de- 
sign solutions for Digital Cellular Phone and Tele- 
communication switching applications requiring high 
performance, high density storage capability cou- 
pled with modular software designs, and a small 
form factor package (x8-only bus). The 2-Mbit's 
blocking scheme allows for an easy segmentation of 
the embedded code with; 16 Kbytes of Hardware- 
Protected Boot code, 2 Main Blocks of program 
code and 2 Parameter Blocks of 8 Kbytes each for 
frequently updatable data storage and diagnostic 
messages 
(e.g. 
phone 
numbers, 
authorization 


codes). Figure 2 is an example of such an applica- 
tion with the 28F002BX-T. 


These are a few actual examples of the wide range 
of applications for the 2-Mbit Boot Block flash mem- 
ory family which enable system designers to achieve 
the best possible product design. Only your imagina- 
tion limits the applicability of such a versatile product 
family. 
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28F002BX 
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The 28F002BX 
40-Lead 
TSOP pinout 
shown 
in Fig- 
ure 5 is 100% 
compatible 
and 
provides 
a density 
upgrade 
to the 28F004BX 
4-Mbit 
Boot 
Block 
flash 
memory. 
The 28F200BX 
44-Lead 
PSOP pinout follows 
the in- 
dustry 
standard 
ROM/EPROM 
pinout 
as shown 
in 
Figure 3 with an upgrade 
to the 28F400BX 
(4-Mbit 
flash 
family). 
Furthermore, 
the 
28F200BX 
56-Lead 
TSOP pinout shown 
in Figure 4 provides 
density 
up- 
grades to the 28F400BX 
and to future higher density 
boot block memories. 
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Figure 3. PSOP Lead Configuration 
for x8/x16 
28F200BX 


28F200BX-T/B,28FOO2BX-T/B 
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Figure 4. TSOP Lead Configuration 
for x8/x16 
28F200BX 
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Figure 5. TSOP Lead Configuration 
for x8 28FOO2BX 


Symbol 
Type 
Name and Function 


Ao-A16 
I 
ADDRESS 
INPUTS for memory addresses. 
Addresses 
are internally 
latched 


during a write cycle. 


Ag 
I 
ADDRESS 
INPUT: When Ag is at 12V the signature 
mode is acCessed. During this 
mode Ao decodes 
between 
the manufacturer 
and device 10's. When BYTE# 
is at 
a logic low only the lower byte of the signatures 
are read. 0015/ A-1 
is a don't 
care in the signature 
mode when BYTE # is low. 


000-007 
I/O 
DATA INPUTS/OUTPUTS: 
Inputs array data on the second CE # and WE # cycle 
during a program command. 
Inputs commands 
to the Command 
User Interface 
when CE # and WE # are active. Data is internally 
latched during the write and 
program 
cycles. Outputs 
array, Intelligent 
Identifier and Status Register 
data. The 
data pins float to tri-state 
when the chip is deselected 
or the outputs are disabled. 


00e-0015 
I/O 
DATA 
INPUTS/OUTPUTS: 
Inputs array data on the second CE # and WE # cycle 
during a program command. 
Data is internally 
latched during the write and program 
cycles. Outputs array data. The data pins float to tri-state 
when the chip is 


deselected 
or the outputs are disabled 
as in the byte-wide 
mode (BYTE# 
= "0"). 


In the byte-wide 
mode 0015/ A -1 becomes 
the lowest order address for data 
output on 000-007. 


CE# 
I 
CHIP ENABLE: 
Activates 
the device's 
control 
logic, input buffers, decoders 
and 
sense amplifiers. 
CE # is active low; CE # high deselects 
the memory device and 
reduces 
power consumption 
to standby 
levels. If CE # and RP# are high, but not 
at a CMOS high level, the standby current will increase 
due to current flow through 
the CE# 
and RP# 
input stages. 


RP# 
I 
RESET/DEEP 
POWER-DOWN: 
Provides three-state 
control. 
Puts the device in 
deep power-down 
mode. Locks the boot block from program/erase. 


When RP# 
is at logic high level and equals 6.5V maximum 
the boot block is 


locked and cannot 
be programmed 
or erased. 


When RP# 
= 11.4V minimum the boot block is unlocked 
and can be programmed 
or erased. 


When RP# 
is at a logic low level the boot block is locked, the deep power-down 
mode is enabled 
and the WSM is reset preventing 
any blocks from being 


programmed 
or erased, therefore 
providing 
data protection 
during power 


transitions. 
When RP# 
transitions 
from logic low to logic high the flash memory 
enters the read array mode. 


OE# 
I 
OUTPUT 
ENABLE: 
Gates the device's 
outputs through the data buffers during a 


read cycle. OE # is active low. 


WE# 
I 
WRITE 
ENABLE: 
Controls 
writes to the Command 
Register and array blocks. 


WE # is active low. Addresses 
and data are latched on the rising edge of the WE # 


pulse. 


BYTE # 
I 
BYTE # ENABLE: 
Controls 
whether 
the device operates 
in the byte-wide 
mode 
(x8) or the word-wide 
mode (x16). BYTE # pin must be controlled 
at CMOS levels 
to meet 100 /-LACMOS current in the standby 
mode. BYTE # = "0" 
enables the 
byte-wide 
mode, where data is read and programmed 
on 000-007 
and 


0015/ 
A_1 becomes 
the lowest order address that decodes 
between 
the upper 
and lower byte. DOe-DOg 
are tri-stated 
during the byte-wide 
mode. 


BYTE # = "1" enables the word-wide 
mode where data is read and programmed 
on 000-0015. 


Vpp 
PROGRAM/ERASE 
POWER SUPPLY: 
For erasing memory array blocks or 


programming 
data in each block. 
Note: Vpp < VPPLMAX memory contents 
cannot 
be altered. 


Vcc 
DEVICE 
POWER SUPPLY (5V ± 10%, 5V ± 5%) 


GNO 
GROUND: 
For all internal circuitry. 


NC 
NO CONNECT: 
Pin may be driven or left floating. 


OU 
DON'T USE PIN: Pin should not be connected 
to anything. 
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Symbol 
Type 
Name and Function 


Ao-A17 
I 
ADDRESS 
INPUTS for memory addresses. 
Addresses 
are internally 
latched 
during 
a write cycle. 


Ag 
I 
ADDRESS 
INPUT: When Ag is at 12V the signature 
mode is accessed. 
During this 
mode Ao decodes 
between 
the manufacturer 
and device ID's. 


DQO-DQ7 
I/O 
DATA INPUTS/OUTPUTS: 
Inputs array data on the second CE # and WE # cycle 


during a program command. 
Inputs commands 
to the command 
user interface 
when CE # and WE # are active. Data is internally 
latched during the write and 
program 
cycles. Outputs array, Intelligent 
Identifier and status register data. The 
data pins float to tri-state 
when the chip is deselected 
or the outputs are disabled. 


CE# 
I 
CHIP ENABLE: Activates 
the device's 
control 
logic, input buffers, decoders 
and 


sense amplifiers. 
CE # is active low; CE # high deselects 
the memory device and 
reduces power consumption 
to standby 
levels. If CE # and RP # are high, but not at 


a CMOS high level, the standby current will increase 
due to current flow through the 


CE# 
and RP# 
input stages. 


#RP# 
I 
RESET/DEEP 
POWER DOWN: Provides Three-State 
control. 
Puts the device in 
deep powerdown 
mode. Locks the Boot Block from program/erase. 


When RP# 
is at logic high level and equals 6.5V maximum 
the Boot Block is locked 
and cannot 
be programmed 
or erased. 


When RP # = 11.4V minimum the Boot Block is unlocked 
and can be programmed 


or erased. 


When RP# 
is at a logic low level the Boot Block is locked, the deep powerdown 
mode is enabled 
and the WSM is reset preventing 
any blocks from being 


programmed 
or erased, therefore 
providing 
data protection 
during power 


transitions. 
When RP# 
transitions 
from logic low to logic high, the flash memory 


enters the read-array 
mode. 


OE# 
I 
OUTPUT 
ENABLE: Gates the device's 
outputs through the data buffers during a 


read cycle. DE # is active low. 


WE# 
I 
WRITE 
ENABLE: Controls 
writes to the Command 
Register and array blocks. WE # 
is active low. Addresses 
and data are latched on the rising edge of the WE # pulse. 


Vpp 
PROGRAM/ERASE 
POWER SUPPLY: For erasing memory array blocks or 


programming 
data in each block. 


Note: Vpp < VPPLMAX memory contents 
cannot 
be altered. 


Vcc 
DEVICE 
POWER SUPPLY (5V ± 10%, 5V ± 5%) 


GND 
GROUND: 
For all internal circuitry. 


NC 
NO CONNECT: 
Pin may be driven or left floating. 


DU 
DON'T USE PIN: Pin should not be connected 
to anything. 
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The 28F200BX uses a blocked array architecture to 
provide independent erasure of memory blocks. A 
block is erased independently of other blocks in the 
array when an address is given within the block ad- 
dress range and the Erase Setup and Erase Confirm 
commands are written to the CUI. The 28F200BX is 
a random read/write memory, only erasure is per- 
formed by block. 


2.1.1.1 Boot Block Operation 
and Data 


Protection 


The 16-Kbyte boot block provides a lock feature for 
secure code storage. The intent of the boot block is 
to provide a secure storage area for the kernel code 
that is required to boot a system in the event of pow- 
er failure or other disruption during code update. 
This lock feature ensures absolute data integrity by 
preventing the boot block from being written or 
erased when RP# is not at 12V. The boot block can 
be erased and written when RP# is held at 12V for 
the duration of the erase or program operation. This 
allows customers to change the boot code when 
necessary while providing security when needed. 
See the Block Memory Map section for address 
locations of the boot block for the 28F200BX-T 
and 28F200BX-B. 


2.1.1.2 Parameter 
Block Operation 


The 28F200BX has 2 parameter blocks (8 Kbytes 
each). The parameter blocks are intended to provide 
storage for frequently updated system parameters 
and configuration or diagnostic information. The pa- 
rameter blocks can also be used to store additional 
boot or main code. The parameter blocks however, 
do not have the hardware write protection feature 
that the boot block has. The parameter blocks pro- 
vide for more efficient memory utilization when deal- 
ing with parameter changes versus regularly blocked 
devices. See the Block Memory Map section for ad- 
dress locations of the parameter blocks for the 
28F200BX-T and 28F200BX-B. 
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2.1.1.3 Main Block Operation 


Two main blocks of memory exist on the 28F200BX 
(1 x 128 Kbyte block and 1 x 96-Kbyte block). See 
the following section on Block Memory Map for the 
address location of these blocks for the 28F200BX-T 
and 28F200BX-B products. 


Two versions of the 28F200BX product exist to sup- 
port two different memory maps of the array blocks 
in order to accommodate different microprocessor 
protocols for boot code location. The 28F200BX-T 
memory map is inverted from the 28F200BX-B 
memory map. 


2.1.2.1 28F200BX-B 
Memory 
Map 


The 28F200BX-B device has the 16-Kbyte boot 
block located from OOOOOH 
to 01FFFH to accommo- 


date those microprocessors that boot from the bot- 
tom 
of 
the 
address 
map. at 
OOOOOH.In the 


28F200BX-B the first 8-Kbyte parameter block re- 
sides in memory space from 02000H to 02FFFH. 
The second 8-Kbyte parameter block resides in 
memory space 
from 
03000H 
to 
03FFFH. The 


96-Kbyte main block resides in memory space from 
04000H to OFFFFH. The 128-Kbyte main block re- 
sides in memory space from 10000H to 1FFFFH 
(word locations). See Figure 7. 


(Word Addresses) 


1FFFFH 


04000H 


03FFFH 


03000H 


02FFFH 


02000H 


01FFFH 


2.1.2.2 
28F200BX·T 
Memory 
Map 


The 28F200BX-T device has the 16-Kbyte boot 
block located from 1EOOOHto 1FFFFH to accommo- 
date those microprocessors that boot from the top 
of the address map. In the 28F200BX-T the first 
8-Kbyte parameter block resides in memory space 
from 1DOOOHto 1DFFFH. The second 8-Kbyte pa- 
rameter 
block 
resides 
in 
memory 
space 
from 
1COOOHto 1CFFFH. The 96-Kbyte main block re- 
sides in memory space from 10000H to 1BFFFH. 
The 128-Kbyte main block resides in memory space 
from OOOOOHto OFFFFHas shown in Figure 8. 
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The 28F002BX uses a blocked array architecture to 
provide independent erasure of memory blocks. A 
block is erased independently of other blocks in the 
array when an address is given within the block ad- 
dress range and the Erase Setup and Erase Confirm 
commands are written to the CUI. The 28F002BX is 
a random read/write memory, only erasure is per- 
formed by block. 


3.1.1.1 
Boot Block Operation 
and Data 
Protection 


The 16-Kbyte boot block provides a lock feature for 
secure code storage. The intent of the boot block is 
to provide a secure storage area for the kernel code 
that is required to boot a system in the event of pow- 
er failure or other disruption during code update. 
This lock feature ensures absolute data integrity by 
preventing the boot block from being programmed 
or erased when RP# is not at 12V. The boot block 
can be erased and programmed when RP# is held 
at 12V for the duration of the erase or program oper- 
ation. This allows customers to change the boot 
code when necessary while still providing security 
when needed. See the Block Memory Map section 
for address locations of the boot block for the 
28F002BX-T and 28F002BX-B. 


3.1.1.2 
Parameter 
Block Operation 


The 28F002BX has 2 parameter blocks (8 Kbytes 
each). The parameter blocks are intended to provide 
storage for frequently updated system parameters 
and configuration or diagnostic information. The pa- 
rameter blocks can also be used to store additional 
boot or main code. The parameter blocks however, 
do not have the hardware write protection feature 
that the boot block has. Parameter blocks provide 
for more efficient memory utilization when dealing 
with 
small 
parameter 
changes 
versus 
regularly 
blocked devices. See the Block Memory Map sec- 
tion for address locations of the parameter blocks 
for the 28F002BX-T and 28F002BX-B. 


3.1.1.3 
Main Block Operation 


Two main blocks of memory exist on the 28F002BX 
(1 x 128-Kbyte block and 1 x 96-Kbyte block). See 
the following section on Block Memory Map for 
address 
location 
of 
these 
blocks 
for 
the 
28F002BX-T and 28F002BX-B. 


Two versions of the 28F002BX product exist to sup- 
port two different memory maps of the array blocks 
in order to accommodate different microprocessor 
protocols for boot code location. The 28F002BX-T 
memory map is inverted from the 28F002BX-B 
memory map. 


3.1.2.1 
28F002BX·B 
Memory 
Map 


The 28F002BX-B device has the 16-Kbyte boot 
block located from OOOOOH 
to 03FFFH to accommo- 


date those microprocessors that boot from the bot- 
tom 
of 
the 
address 
map 
at 
OOOOOH.In 
the 
28F002BX-B the first 8-Kbyte parameter block re- 
sides in memory from 04000H to 05FFFH. The sec- 
ond 8-Kbyte parameter block resides in memory 
space from 06000H to 07FFFH. The 96-Kbyte main 
block resides in memory space from 08000H to 
1FFFFH. The 128-Kbyte main block resides in mem- 
ory space from 20000H to 3FFFFH. See Figure 10. 


oeOOOH 


07FFFH 


06000H 


05FFFH 


04000H 


03FFFH 


3.1.2.2 
28F002BX·T 
Memory 
Map 


The 28F002BX-T device has the 16-Kbyte boot 
block located from 3COOOHto 3FFFFH to accom- 
modate those microprocessors that boot from the 
top of the address map. In the 28F002BX-T the first 
8-Kbyte parmeter block resides in memory space 
from 3AOOOHto 3BFFFH. The second 8-Kbyte pa- 
rameter 
block 
resides 
in 
memory 
space 
from 
38000H to 39FFFH. The 96-Kbyte main block re- 
sides in memory space from 20000H to 37FFFH. 
The 128-Kbyte main block resides in memory space 
from OOOOOHto 1FFFFH. 


3COOOH 
3BFFFH 


3AOOOH 
39FFFH 


38000H 
37FFFH 


4.0 
PRODUCT 
FAMILY 
PRINCIPLES 
OF OPERATION 


Flash memory augments EPROM functionality with 
in-circuit electrical write and erase. The 2-Mbit flash 
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family utilizes a Command User Interface (CUI) and 
internally generated and timed algorithms to simplify 
write and erase operations. 


The CUI allows for 100% TTL-Ievel control inputs, 
fixed power supplies during erasure and program- 
ming, and maximum EPROM compatibility. 


In the absence of high voltage on the Vpp pin, the 
2-Mbit boot block flash family will only successfully 
execute the following commands: Read Array, Read 
Status Register, Clear Status Register and Intelli- 
gent Identifier mode. The device provides standard 
EPROM read, standby and output disable opera- 
tions. Manufacturer Identification and Device Identi- 
fication data can be accessed through the CUI or 
through the standard EPROM A9 high voltage ac- 
cess (VIO)for PROM programming equipment. 


The same EPROM read, standby and output disable 
functions are available when high voltage is applied 
to the Vpp pin. In addition, high voltage on Vpp al- 
lows write and erase of the device. All functions as- 
sociated with altering memory contents: write and 
erase, Intelligent Identifier read and Read Status are 
accessed via the CUI. 


The purpose of the Write State Machine (WSM) is to 
completely automate the write and erasure of the 
device. The WSM will begin operation upon receipt 
of a signal from the CUI and will report status back 
through a Status Register. The CUI will handle the 
WEIF interface to the data and address latches, as 
well as system software requests for status while the 
WSM is in operation. 


Flash memory reads, erases and writes in-system 
via the local CPU. All bus cycles to or from the flash 
memory conform to standard microprocessor bus 
cycles. 


Mode 
Notes 
RP# 
eEl' 
OE# 
WE# 
Ag 
Ao 
Vpp 
000-15 


Read 
1,2,3 
VIH 
VIL 
VIL 
VIH 
X 
X 
X 
DOUT 


Output Disable 
VIH 
VIL 
VIH 
VIH 
X 
X 
X 
HighZ 


Standby 
VIH 
VIH 
X 
X 
X 
X 
X 
HighZ 


Deep Power· Down 
9 
VIL 
X 
X 
X 
X 
X 
X 
HighZ 


Intelligent 
Identifier 
(Mfr) 
4 
VIH 
VIL 
VIL 
VIH 
VID 
VIL 
X 
0089H 


Intelligent 
Identifier 
(Device) 
4,5 
VIH 
VIL 
VIL 
VIH 
VID 
VIH 
X 
2274H 
2275H 


Write 
6,7,8 
VIH 
VIL 
VIH 
VIL 
X 
X 
X 
DIN 


Mode 
Notes 
RP# 
eEl' 
OE# 
WE# 
Ag 
Ao 
A-1 
Vpp 
000-7 
008-14 


Read 
1,2,3 
VIH 
VIL 
VIL 
VIH 
X 
X 
X 
X 
DOUT 
HighZ 


Output 
Disable 
VIH 
VIL 
VIH 
VIH 
X 
X 
X 
X 
HighZ 
HighZ 


Standby 
VIH 
VIH 
X 
X 
X 
X 
X 
X 
HighZ 
HighZ 


Deep Power-Down 
9 
VIL 
X 
X 
X 
X 
X 
X 
X 
HighZ 
HighZ 


Intelligent 
Identifier 
(Mfr) 
4 
VIH 
VIL 
VIL 
VIH 
VID 
VIL 
X 
X 
89H 
HighZ 


Intelligent 
Identifier 
4,5 
VIH 
VIL 
VIL 
VIH 
VID 
VIH 
X 
X 
74H 
HighZ 
(Device) 
75H 


Write 
6,7,8 
VIH 
VIL 
VIH 
VIL 
X 
X 
X 
X 
DIN 
HighZ 


NOTES: 
1. Refer to DC Characteristics. 
2. X can be VIL or VIH for control 
pins and addresses, 
VpPL or VpPH for Vpp. 


3. See DC characteristics 
for ""PPL, VPPH, VHH, VID voltages. 
4. Manufacturer 
and Device 
codes 
may also be accessed 
via a CUI write sequence. 
A1-A17 = X. 


5. Device 
10 = 2274H 
for 28F200BX-T 
and 2275H 
for 28F200BX·B. 
6. Refer to Table 
4 for valid DIN during 
a write operation. 


7. Command 
writes 
for Block 
Erase or Word/Byte 
Write are only executed 
when 
Vpp = VPPH. 
8. To write or erase the boot block, 
hold RP# 
at VHH. 


9. RP# 
must be at GND 
±O.2V 
to meet the 1.2 p.A maximum 
deep 
power-down 
current. 


4.2 
28F002BX Bus Operations 


Table 3. Bus Operations 


Mode 
Notes 
RP# 
CE# 
OE# 
WE# 
Ag 
An 
Vpp 
DQO-7 


Read 
1,2,3 
VIH 
VIL 
VIL 
VIH 
X 
X 
X 
DOUT 


Output Disable 
VIH 
VIL 
VIH 
VIH 
X 
X 
X 
HighZ 


Standby 
VIH 
VIH 
X 
X 
X 
X 
X 
HighZ 


Deep Power-Down 
9 
VIL 
X 
X 
X 
X 
X 
X 
HighZ 


Intelligent 
Identifier 
(Mfr) 
4 
VIH 
VIL 
VIL 
VIH 
VID 
VIL 
X 
89H 


Intelligent 
Identifier 
(Device) 
4,5 
VIH 
VIL 
VIL 
VIH 
VID 
VIH 
X 
7CH 
7DH 


Write 
6,7,8 
VIH 
VIL 
VIH 
VIL 
X 
X 
X 
DIN 


NOTES: 
1. Refer to DC Characteristics. 
2. X can be VIL or VIH for control 
pins and addresses, 
VPPL or VPPH for Vpp. 


3. See DC characteristics 
for VPPL, VPPH, VHH, VIO voltages. 
4. Manufacturer 
and Device 
codes 
may also be accessed 
via a CUI write sequence. 
A1-A16 = X. 


5. Device 
ID = 7CH for 28F002BX-T 
and 7DH for 28F002BX·B. 


6. Refer to Table 
4 for valid DIN during 
a write operation. 
7. Command 
writes 
for Block 
Erase or byte program 
are only executed 
when Vpp = VPPH. 


8. Program 
or erase the Boot block 
by holding 
RP# 
at VHH. 


g. RP# 
must be at GND 
±O.2V 
to meet the 1.2 ,..A maximum 
deep power-down 
current. 


4.3 
Read Operations 


The 
2-Mbit 
boot 
block 
flash 
family 
has three 
user 


read modes; 
Array, 
Intelligent 
Identifier, 
and Status 
Register. 
Status 
Register 
read 
mode 
will 
be 
dis- 
cussed 
in detail in tlTe "Write 
Operations" 
section. 


During power-up 
conditions 
(VCC supply ramping), 
it 


takes 
a maximum 
of 600 
ns from 
when 
Vcc 
is at 


4.5V minimum 
to valid data on the outputs. 


If the memory 
is not in the Read Array 
mode, 
it is 
necessary 
to write the appropriate 
read mode com- 
mand to the CUI. The 2-Mbit boot block flash family 
has three control 
functions, 
all of which must be logi- 


cally active, 
to obtain 
data at the outputs. 
Chip-En- 
able 
CE # 
is the 
device 
selection 
control. 
Power- 
Down 
RP# 
is the device 
power 
control. 
Output-En- 
able OE# 
is the DATA 
INPUT/OUTPUT 
(00[0:15) 


or 
00[0:7)) 
direction 
control 
and 
when 
active 
is 


used to drive data from the selected 
memory 
on to 


the I/O bus. 


4.3.1.1 Output Control 


With OE # at logic-high 
level (VIH), the output 
from 


the 
device 
is disabled 
and 
data 
input/output 
pins 


(00[0:15) 
or 00[0:7)) 
are tri-stated. 
Data 
input 
is 


then controlled 
by WE # . 


4.3.1.2 Input Control 


With WE # at logic-high 
level (VIH), input to the de- 


vice is disabled. 
Data Input/Output 
pins (00-[0:15] 


or 00[0:7)) 
are controlled 
by OE#. 


The manufacturer 
and device codes are read via the 


CUI or by taking 
the Ag pin to 12V. Writing 
90H to 


the CUI places 
the device 
into Intelligent 
Identifier 


read mode. 
A read of location 
OOOOOH outputs 
the 


manufacturer's 
identification 
code, 0089H, and loca- 


tion 
00001H 
outputs 
the 
device 
code; 
2274H 
for 


28F200BX-T, 
2275H 
for 
28F200BX-B. 
When 


BYTE # is at a logic low only the lower byte of the 
above signatures 
is read and 0015/ A -1 
is a "don't 


care" 
during Intelligent 
Identifier 
mode. A read array 


command 
must be written to the CUI to return to the 


read array mode. 
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The manufacturer and device codes are also read 
via the CUI or by taking the A9 pin to 12V. Writing 
90H to the CUI places the device into Intelligent 
Identifier read mode. A read of location OOOOOH out- 
puts the manufacturer's identification code, 89H, 
and location 00001H 
outputs the device code; 7CH 


for 28F002BX-T, 7DH for 28F002BX-B. 


Commands are written to the CUI using standard mi- 
croprocessor write timings. The CUI serves as the 
interface between the microprocessor and the inter- 
nal chip operation. The CUI can decipher Read Ar- 
ray, Read Intelligent Identifier, Read Status Register, 
Clear Status Register, Erase and Program com- 
mands. In the event of a read command, the CUI 
simply points the read path at either the array, the 
intelligent identifier, or the status register depending 
on the specific read command given. For a program 
or erase cycle, the CUI informs the write state ma- 
chine that a write or erase has been requested. Dur- 
ing a program cycle, the Write State Machine will 
control the program sequences and the CUI will only 
respond to status reads. During an erase cycle, the 
CUI will respond to status reads and erase suspend. 
After the Write State Machine has completed its 
task, it will allow the CUI to respond to its full com- 
mand set. The CUI will stay in the current command 
state until the microprocessor issues another com- 
mand. 


The CUI will successfully initiate an erase or write 
operation only when Vpp is within its voltage range. 
Depending upon the application, the system design- 
er may choose to make the Vpp power supply 
switchable, available only when memory updates 
are desired. The system designer can also choose 
to "hard-wire" Vpp to 12V. The 2 Mbit boot block 
flash family is designed to accommodate either de- 
sign practice. It is recommended that RP# be tied to 
logical Reset for data protection during unstable 
CPU reset function as described in the "Product 
Family Overview" section. 


In the case of Boot Block modifications (write and 
erase), RP# is set to VHH = 12V typically, in addi- 
tion to Vpp at high voltage. However, if RP# is not at 
VHHwhen a program or erase operation of the boot 
block is attempted, the corresponding status register 
bit (Bit 4 for Program and Bit 5 for Erase, refer to 
Table 5 for Status Register Definitions) is set to indi- 
cate the failure to complete the operation. 


4.4.2 COMMAND USER INTERFACE (CUI) 


The Command User Interface (CUI) serves as the 
interface to the microprocessor. The CUI points the 
read/write path to the appropriate circuit block as 
described in the previous section. After the WSM 
has completed its task, it will set the WSM Status bit 
to a "1", which will also allow the CUI to respond to 
its full command set. Note that after the WSM has 
returned control to the CUI, the CUI will remain in its 
current state. 


Command 
Device Mode 
Codes 


00 
Invalid/Reserved 


10 
Alternate Program Setup 


20 
Erase Setup 
40 
Program Setup 
50 
Clear Status Register 


70 
Read Status Register 


90 
Intelligent Identifier 


BO 
Erase Suspend 


DO 
Erase Resume/Erase Confirm 
FF 
Read Array 


4.4.2.2 Command Function Descriptions 


Device operations are selected by writing specific 
commands into the CUI. Table 4 defines the 2-Mbit 
boot block flash family commands. 
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Bus 
Notes 
First Bus Cycle 
Second 
Bus Cycle 
Command 
Cycles 
Req'd 
8 
Operation 
Address 
Data Operation 
Address 
Data 


Read Array/Reset 
1 
1 
Write 
X 
FFH 


Intelligent Identifier 
3 
2,4 
Write 
X 
90H 
Read 
IA 
110 


Read Status Register 
2 
3 
Write 
X 
70H 
Read 
X 
SRD 


Clear Status Register 
1 
Write 
X 
50H 


Erase Setup/Erase Confirm 
2 
5 
Write 
BA 
20H 
Write 
BA 
DOH 


Word/Byte Write Setup/Write 
2 
6, 7 
Write 
WA 
40H 
Write 
WA 
WD 


Erase Suspend/Erase Resume 
2 
Write 
X 
BOH 
Write 
X 
DOH 


Alternate Word/Byte Write Setup/Write 
2 
6, 7 
Write 
WA 
10H 
Write 
WA 
WD 


NOTES: 
1. Bus operations 
are defined 
in Tables 
1, 2, 3. 


2. IA = Identifier 
Address: 
OOH for manufacturer 
code. 01 H for device 
code. 
3. SRO = Data read from Status 
Register. 


4. 110 = Intelligent 
Identifier 
Data. 


Following 
the Intelligent 
Identifier 
Command, 
two read operations 
access 
manufacturer 
and device 
codes. 


5. BA = Address 
within 
the block 
being erased. 
6. PA = Address 
to be programmed. 
PO = Data to be programmed 
at location 
PA. 


7. Either 40H or 10H command 
is valid. 


6. When 
writing 
commands 
to the device, 
the upper 
data 
bus 
[006-00151 
= X (28F200BX-only) 
which 
is either 
Vcc 
or 
Vss 
to avoid 
burning 
additional 
current. 


These are unassigned commands. It is not recom- 
mended that the customer use any command other 
than the valid commands specified above. Intel re- 
serves the right to redefine these codes for future 
functions. 


Read 
Array 
(FFH) 


This single write command points the read path at 
the array. If the host CPU performs a CE#/OE# 
controlled read immediately following a two-write se- 
quence that started the WSM, then the device will 
output status register contents. If the Read Array 
command is given after Erase Setup the device is 
reset to read the array. A two Read Array command 
sequence (FFH) is required to reset to Read Array 
after Program Setup. 


Intellgent 
Identifier 
(90H) 


After this command is executed, the CUI points the 
output path to the Intelligent Identifier circuits. Only 
Intelligent Identifier values at addresses 0 and 1 can 
be read (only address AO is used in this mode, all 
other address inputs are ignored). 


Read Status 
Register 
(70H) 


This is one of the two commands that is executable 
while the state machine is operating. After this com- 
mand is written, a read of the device will output the 
contents of the status register, regardless of the ad- 
dress presented to the device. 


The device automatically enters this mode after pro- 
gram or erase has completed. 


Clear Status 
Register 
(SOH) 


The WSM can only set the Program Status and 
Erase Status bits in the status register, it can not 
clear them. Two reasons exist for operating the 
status register in this fashion. The first is a synchro- 
nization. The WSM does not know when the host 
CPU has read the status register, therefore it would 
not know when to clear the status bits. Secondly, if 
the CPU is programming a string of bytes, it may be 
more efficient to query the status register after pro- 
gramming the string. Thus, if any errors exist while 
programming the string, the status register will return 
the accumulated error status. 


Program 
Setup 
(40H or 10H) 


This command simply sets the CUI into a state such 
that the next write will load the address and data 
registers. Either 40H or 10H can be used for Pro- 
gram Setup. Both commands are included to ac- 
commodate efforts to achieve an industry standard 
command code set. 


Program 


The second write after the program setup command, 
will latch addresses and data. Also, the CUI initiates 
the WSM to begin execution of the program algo- 
rithm. While the WSM finishes the algorithm, the de- 
vice will output Status Register contents. Note that 
the WSM cannot be suspended during program- 
ming. 


Erase 
Setup 
(20H) 


Prepares the CUI for the Erase Confirm command. 
No other action is taken. If the next command is not 
an Erase Confirm command then the CUI will set 
both the Program Status and Erase Status bits of the 
Status Register to a "1", place the device into the 
Read Status Register state, and wait for another 
command. 


Erase 
Confirm 
(DOH) 


If the previous command was an Erase Setup com- 
mand, then the CUI will enable the WSM to erase, at 
the same time closing the address and data latches, 
and respond only to the Read Status Register and 
Erase Suspend commands. While the WSM is exe- 
cuting, the device will output Status Register data 
when OEilf is toggled low. Status Register data can 
only be updated by toggling either OEilf or CEilf low. 


Erase 
Suspend 
(BOH) 


This command only has meaning while the WSM is 
executing an Erase operation, and therefore will only 
be responded to during an erase operation. After 
this command has been executed, the CUI will set 
an output that directs the WSM to suspend Erase 
operations, and then return to responding to only 
Read Status Register or to the Erase Resume com- 
mands. Once the WSM has reached the Suspend 
state, it will set an output into the CUI which allows 
the CUI to respond to the Read Array, Read Status 
Register, and Erase Resume commands. In this 
mode, the CUI will not respond to any other cofn- 
mands. The WSM will also set the WSM Status bit to 
a "1". The WSM will continue to run, idling in the 
SUSPEND state, regardless of the state of all input 


control pins, with the exclusion of RPilf. RPilf will 
immediately shut down the WSM and the remainder 
of the chip. During a suspend operation, the data 
and address latches will remain closed, but the ad- 
dress pads are able to drive the address into the 
read path. 


Erase 
Resume 
(DOH) 


This command will cause the CUI to clear the Sus- 
pend state and set the WSM Status bit to a "0", but 
only if an Erase Suspend command was previously 
issued. Erase Resume will not have any effect in all 
other conditions. 


The 2-Mbit boot block flash family contains a status 
register which may be read to determine when a pro- 
gram or erase operation is complete, and whether 
that operation completed successfully. The status 
register may be read at any time by writing the Read 
Status command to the CUI. After writing this com- 
mand, all subsequent Read operations output data 
from the status register until another command is 
written to the CUI. A Read Array command must be 
written to the CUI to return to the Read Array mode. 


The status register bits are output on 00[0:7] 
whether the device is in the byte-wide (x8) or word- 
wide (x16) mode for the 28F200BX. In the word-wide 
mode the upper byte, 00[8:15] 
is set to OOHduring 


a Read Status command. In the byte-wide mode, 
00[8:14] 
are tri-stated and D015/A-1 
retains the 


low order address function. 


It should be noted that the contents of the status 
register are latched on the falling edge of OEilf or 
CEilf whichever occurs last in the read cycle. This 
prevents possible bus errors which might occur if the 
contents of the status register change while reading 
the status register. CEilf or OEilf must be toggled 
with each subsequent status read, or the completion 
of a program or erase operation will not be evident. 


The Status Register is the interface between the mi- 
croprocessor and the Write State Machine (WSM). 
When the WSM is active, this register will indicate 
the status of the WSM, and will also hold the bits 
indicating whether or not the WSM was successful in 
performing the desired operation. The WSM sets 
status bits "Three" through "Seven" and clears bits 
"Six" 
and "Seven", 
but cannot clear status bits 


"Three" 
through "Five". 
These bits can only be 


cleared by the controlling CPU through the use of 
the Clear Status Register command. 
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4.4.3.1 Status Register Bit Definition 
Table 5. Status Register Definitions 


SR.? = WRITE STATE MACHINE STATUS 
1 = Ready 
0= 
Busy 


SR.6 = ERASE SUSPEND STATUS 
1 = Erase Suspended 
o = Erase in Progress/Completed 


SR.5 = ERASE STATUS 
1 = Error in Block Erasure 
o = Successful Block Erase 


SR.4 = PROGRAM STATUS 
1 = Error in Byte/Word Program 
o = Successful Byte/Word Program 


SR.3 = Vpp STATUS 
1 = Vpp Low Detect; Operation Abort 
0= 
Vpp OK 


SR.2-SR.O 
MENTS 


4.4.3.2 Clearing the Status Register 


Certain 
bits in the status register are set by the write 
state machine, 
and can only be reset by the system 
software. 
These bits can indicate various failure con- 
ditions. 
By allowing 
the system 
software 
to control 
the resetting 
of these 
bits, several 
operations 
may 
be 
performed 
(such 
as cumulatively 
programming 
several 
bytes 
or 
erasing 
multiple 
blocks 
in 
se- 
quence). 
The 
status 
register 
may then 
be read to 
determine 
if an error occurred 
during that program- 
ming 
or erasure 
series. 
This 
adds 
flexibility 
to the 
way the device 
may be programmed 
or erased. 
To 
clear 
the status 
register, 
the Clear Status 
Register 
command 
is written 
to the 
CUI. 
Then, 
any 
other 
command 
may be issued to the CUI. Note again that 
before 
a read cycle 
can be initiated, 
a Read Array 
command 
must 
be 
written 
to 
the 
CUI 
to 
specify 
whether 
the 
read data 
is to come 
from 
the 
array, 
status 
register, 
or Intelligent 
Identifier. 


Write State Machine Status bit must first be checked to 
determine byte/word program or block erase completion, 
before the Program or Erase Status bits are checked for 
success. 


When Erase Suspend is issued, WSM halts execution 
and sets both WSMS and ESS bits to "1". ESS bit re- 
mains set to "1" until an Erase Resume command is is- 
sued. 


When this bit is set to "1". WSM has applied the maxi- 
mum number of erase pulses to the block and is still un- 
able to successfully perform an erase verify. 


When this bit is set to "1", WSM has attempted but failed 
to Program a byte or word. 


The Vpp Status bit, unlike an AID converter, does not 
provide continuous indication of Vpp level. The WSM in- 
terrogates the Vpp level only after the byte write or block 
erase command sequences have been entered and in- 
forms the system if Vpp has not been switched on. The 
Vpp Status bit is not guaranteed to report accurate feed- 
back between VPPL and VPPH· 


These bits are reserved for future use and should be 
masked out when polling the Status Register. 


4.4.4 
PROGRAM 
MODE 


Program 
is executed 
by a two-write 
sequence. 
The 


Program 
Setup 
command 
is written 
to the CUI fol- 


lowed by a second write which specifies 
the address 


and 
data 
to be programmed. 
The 
write 
state 
ma- 


chine 
will 
execute 
a sequence 
of internally 
timed 


events 
to: 


1. Program the desired 
bits of the addressed 
memo- 


ry word (byte), and 


2. Verify 
that 
the 
desired 
bits 
are 
sufficiently 
pro- 


grammed 


Programming 
of the memory 
results 
in specific 
bits 


within a byte or word being changed 
to a "0". 


If the user attempts 
to program 
"1"s, 
there will be no 


change 
of the memory 
cell content 
and no error oc- 


curs. 


Similar 
to 
erasure, 
the 
status 
register 
indicates 


whether 
programming 
is complete. 
While 
the 
pro- 


gram sequence 
is executing, 
bit 7 of the status regis- 


ter is a "0". 
The 
status 
register 
can 
be polled 
by 
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toggling either CE# or OE# to determine when the 
program sequence is complete. Only the Read 
Status Register command is valid while program- 
ming is active. 


When programming is complete, the status bits, 
which indicate whether the program operation was 
successful, should be checked. If the programming 
operation was unsuccessful, Bit 4 of the status regis- 
ter is set to a "1" to indicate a Program Failure. If Bit 
3 is set then Vpp was not within acceptable limits, 
and the WSM will not execute the programming se- 
quence. 


The status register should be cleared before at· 
tempting the next operation. Any CUI instruction can 
follow after programming is completed; however, it 
must be recognized that reads from the memory, 
status register, or Intelligent Identifier cannot be ac- 
complished until the CUI is given the appropriate 
command. A Read Array command must first be giv- 
en before memory contents can be read. 


Figure 12 shows a system software flowchart for de- 
vice byte programming operation. Figure 13 shows a 
similar flowchart for device word programming oper- 
ation (28F200BX-only). 


Erasure of a single block is initiated by writing the 
Erase Setup and Erase Confirm commands to the 
CUI, along with the addresses, A[12:16] for the 
28F200BX or A[12:17] for the 28F002BX, identifying 
the block to be erased. These addresses are latched 
internally when the Erase Confirm command is is- 
sued. Block erasure results in all bits within the block 
being set to "1". 


The WSM will execute a sequence of internally 
timed events to: 
1. Program all bits within the block 
2. Verify that all bits within the block are sufficiently 
programmed 


3. Erase all bits within the block and 
4. Verify that all bits within the block are sufficiently 
erased 


While the erase sequence is executing, Bit 7 of the 
status register is a "0". 


When the status register indicates that erasure is 
complete, the status bits, which indicate whether the 
erase operation was successful, should be checked. 
If the erasure operation was unsuccessful, Bit 5 of 
the status register is set to a "1" 
to indicate an 
Erase Failure. If Vpp was not within acceptable limits 
after the Erase Confirm command is issued, the 
WSM will not execute an erase sequence; instead, 
Bit 5 of the status register is set to a "1" to indicate 


an Erase Failure, and Bit 3 is set to a "1" to identify 
that Vpp supply voltage was not within acceptable 
limits. 


The status register should be cleared before at- 
tempting the next operation. Any CUI instruction can 
follow after erasure is completed; however, it must 
be recognized that reads from the memory array, 
status register, or Intelligent Identifier can not be ac- 
complished until the CUI is given the appropriate 
command. A Read Array command must first be giv- 
en before memory contents can be read. 


Figure 14 shows a system software flowchart for 
Block Erase operation. 


4.4.5.1 
Suspending 
and Resuming 
Erase 


Since an erase operation typically requires 1 to 3 
seconds to complete, an Erase Suspend command 
is provided. This allows erase-sequence interruption 
in order to read data from another block of the mem- 
ory. Once the erase sequence is started, writing the 
Erase Suspend command to the CUI requests that 
the Write State Machine (WSM) pause the erase se- 
quence at a predetermined point in the erase algo- 
rithm. The status register must be read to determine 
when the erase operation has been suspended. 
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At this point, a Read Array command can be written 
to the CUI in order to read data from blocks other 
than that which is being suspended. The only other 
valid command at this time is the Erase Resume 
command or Read Status Register operation. 


Figure 15 shows a system software flowchart detail- 
ing the operation. 


During Erase Suspend mode, the chip can go into a 
pseudo-standby mode by taking CE# to VIHand the 
active current is now a maximum of 10 mA. If the 
chip is enabled while in this mode by taking CE# to 
VIL, the Erase Resume command can be issued to 
resume the erase operation. 


Upon completion of reads from any block other than 
the block being erased, the Erase Resume com· 
mand must be issued. When the Erase Resume 
command is given, the WSM will continue with the 
erase sequence and complete erasing the block. As 
with the end of erase, the status register must be 
read, cleared, and the next instruction issued in or- 
der to continue. 


4.4.6 
EXTENDED 
CYCLING 


Intel has designed extended cycling capability into 
its ETOX III flash memory technology. The 2-Mbit 
boot block flash family is designed for 100,000 pro- 
gram/erase cycles on each of the five blocks. The 
combination of low electric fields, clean oxide pro- 
cessing and minimized oxide area per memory cell 
subjected to the tunneling electric field, results in 
very high cycling capability. 


Bus 
Command 
Comments 
Operation 


Write 
Setup 
Data = 40H 


Program 
Address = Byte to be 
programmed 


Write 
Program 
Data to be programmed 
Address = Byte to be 
programmed 


Read 
Status Register Data. 


Toggle OE" 
or CE" 
to update 


Status Register 


Standby 
CheckSR.7 
1 = Ready,O = Busy 


Repeat for subsequent bytes. 


Full status check can be done after each byte or after a 
sequence of bytes. 


Write FFH after the last byte programming operation to 
reset the device to Read Array Mode. 


Bus 
Command 
Comments 
Operation 


Standby 
CheckSR.3 
1 ~ Vpp Low Detect 


Standby 
Check SR.4 
1 = Byte Program Error 


SR.3 MUST be cleared, if set during a program attempt, 
before further attempts are allowed by the Write State 
Machine. 


SR.4 is only cleared by the Clear Status Register 
Command, in cases where multiple bytes are programmed 
before full status is checked. 


If error is detected, clear the Status Register before 
attempting retry or other error recovery. 


Bus 
Command 
Comments 
Operation 


Write 
Setup 
Data = 40H 
Program 
Address = Word to be 
programmed 


Write 
Program 
Data to be programmed 
Address = Word to be 
programmed 


Read 
Status Register Data. 


Toggle OE # or CE # to update 
Status Register 


Standby 
Check SR.? 


1 = Ready, 0 = Busy 


Repeat for subsequent words. 


Full status check can be done after each word or after a 
sequence of words. 


Write FFH after the last word programming operation to 
reset the device to Read Array Mode. 


Bus 
Command 
Comments 
Operation 


Standby 
CheckSR.3 
1 = Vpp Low Detect 


Standby 
Check SR.4 


1 = Word Program Error 


SR.3 MUST be cleared, if set during a program attempt, 
before further attempts are allowed by the Write State 
Machine. 


SR.4 is only cleared by the Clear Status Register 
Command, in cases where multiple words are programmed 
before full status is checked. 


If error is detected, clear the Status Register before 
attempting retry or other error recovery. 


• 


Bus 
Command 
Comments 
Operation 


Write 
Setup 
Data = 20H 


Erase 
Address = Within block to be 
erased 


Write 
Erase 
Data = DOH 


Address = Within block to be 
erased 


Read 
Status Register Data. 


Toggle OE # or CE # to update 
Status Register 


Standby 
CheckSR.7 
1 = Ready,O = Busy 


Repeat for subsequent blocks. 


Full status check can be done after each block or after a 
sequence of blocks. 


Write FFH after the last block erase operation to reset the 
device to Read Array Mode. 


Bus 
Command 
Comments 
Operation 


Standby 
Check SR.3 


1 = Vpp Low Detect 


Standby 
Check SR.4,5 


Both 1 = Command Sequence 
Error 


Standby 
Check SR.5 


1 = Block Erase Error 


SR.3 MUST be cleared, if set during an erase attempt, 
before further attempts are allowed by the Write State 
Machine. 


SR.5 is only cleared by the Clear Status Register 
Command, in cases where multiple blocks are erased 
before full status is checked. 


If error is detected, clear the Status Register before 
attempting retry or other error recovery. 


Bus 
Command 
Comments 


Operation 


Write 
Erase 
Data = SOH 


Suspend 


Read 
Status Register Data. 


ToggleOE# 
orCE# 
to 


update Status Register 


Standby 
Check SR.? 


1 = Ready 


Standby 
CheckSR.6 
1 = Suspended 


Write 
Read Array 
Data = FFH 


Read 
Read array data from block 
other than that being 
erased. 


Write 
Erase Resume 
Data = DOH 


4.5 
Power Consumption 


4.5.1 ACTIVE POWER 


With CE# at a logic-low level and RP# at a logic- 
high level, the device is placed in the active mode. 
The device ICCcurrent is a maximum of 60 mA at 
10 MHz with TIL input signals. 


4.5.2 AUTOMATIC POWER SAVINGS 


Automatic Power Savings (APS) is a low power fea- 
ture during active mode of operation. The 2-Mbit 
family of products incorporate Power Reduction 
Control (PRC) circuitry which basically allows the de- 
vice to put itself into a low current state when it is 
not being accessed. After data is read from the 
memory array, PRC logic controls the device's pow- 
er consumption by entering the APS mode where 


maximum Icc current is 3 mA and typical Ice current 
is 1 mA. The device stays in this static state with 
outputs valid until a new location is read. 


4.5.3 STANDBY POWER 


With CE# at a logic-high level (VIH), and the CUI in 
read mode, the memory is placed in standby mode 
where the maximum Ice standby current is 100 /LA 
with CMOS input signals. The standby operation dis- 
ables much of the device's circuitry and substantially 
reduces device power consumption. The outputs 
(00[0:15] 
or 00[0:7]) 
are placed in a high-imped- 


ance state independent of the status of the OE# 
signal. When the 2-Mbit boot block flash family is 
deselected during erase or program functions, the 
devices will continue to perform the erase or pro- 
gram function and consume program or erase active 
power until program or erase is completed. 


The 2-Mbit boot block flash family supports a typical 
Ice of 0.2 /-LAin deep power-down mode. One of the 
target markets for these devices is in portable equip- 
ment where the power consumption of the machine 
is of prime importance. The 2-Mbit boot block flash 
family has a RP# pin which places the device in the 
deep power-down mode. When RP# is at a logic- 
low (GND ±0.2V), all circuits are turned off and the 
device typically draws 0.2 /-LAof Vee current. 


During read modes, the RP# pin going low dese- 
lects the memory and places the output drivers in a 
high impedance state. Recovery from the deep pow- 
er-down state, requires a minimum of 400 ns to ac- 
cess valid data (tpHQV). 


During erase or program modes, RP# low will abort 
either erase or program operation. The contents of 
the memory are no longer valid as the data has been 
corrupted by the RP# function. As in the read mode 
above, all internal circuitry is turned off to achieve 
the 0.2 /-LAcurrent level. 


RP# transitions to VIL or turning power off to the 
device will clear the status register. 


This use of RP# during system reset is important 
with automated write/erase devices. When the sys- 
tem comes out of reset it expects to read from the 
flash memory. Automated flash memories provide 
status information when accessed during write/ 
erase modes. If a CPU reset occurs with no flash 
memory reset, proper CPU initialization would not 
occur because the flash memory would be providing 
the status information instead of array data. Intel's 
Flash Memories allow proper CPU initialization fol- 
lowing a system reset through the use of the RP# 
input. In this application RP# is controlled by the" 
same RESET# signal that resets the system CPU. 


4.6 
Power-Up Operation 


The 2-Mbit boot block flash family is designed to 
offer protection against accidental block erasure or 
programming during power transitions. Upon power- 
up the 2-Mbit boot block flash family is indifferent as 
to which power supply, Vpp or Vee, powers-up first. 
Power suppy sequencing is not required. 


The 2-Mbit boot block flash family ensures the CUI is 
reset to the read mode on power-up. 


In addition, on power-up the user must either drop 
CE# low or present a new address to ensure valid 
data at the outputs. 


A system designer must guard against spurious 
writes for Vcc voltages above VLKO when Vpp is 


active. Since both WE# and CE# must be low for a 
command write, driving either signal to VIHwill inhibit 
writes to the device. The CUI architecture provides 
an added level of protection since alteration of mem- 
ory contents can only occur after successful com- 
pletion of the two-step command sequences. Final- 
ly, the device is disabled until RP# is brought to VIH, 
regardless of the state of its control inputs. This fea- 
ture provides yet another level of memory protec- 
tion. 


Flash memory's power switching characteristics reo 
quire careful device decoupling methods. System 
designers are interested in 3 supply current issues: 


• Standby current levels (Ices) 
• Active current levels (leeR) 
• Transient peaks produced by falling and rising 


edges of CE# . 


Transient current magnitudes depend on the device 
outputs' capacitive and inductive loading. Two-line 
control and proper decoupling capacitor selection 
will suppress these transient voltage peaks. Each 
flash device should have a 0.1 /-LFceramic capacitor 
connected between each Vee and GND, and be- 
tween its Vpp and GND. These high frequency, low- 
inherent inductance capacitors should be placed as 
close as possible to the package leads. 


4.7.1 
Vpp TRACE 
ON PRINTED 
CIRCUIT 


BOARDS 


Writing to flash memories while they reside in the 
target system, requires special consideration of the 
Vpp power supply trace by the printed circuit board 
designer. The Vpp pin supplies the flash memory 
cell's current for programming and erasing. One 
should use similar trace widths and layout consider- 
ations given to the Vee power supply trace. Ade- 
quate Vpp supply traces and decoupling will de- 
crease spikes and overshoots. 


4.7.2 
Vcc. Vpp AND RP# 
TRANSITIONS 


The CUI latches commands as issued by system 
software and is not altered by Vpp or CE# tran- 
sitions or WSM actions. Its state upon power-up, af- 
ter exit from deep power-down mode or after Vee 
transitions below VLKO (Lockout voltage), is Read 
Array mode. 
• 


After any word/byte write or block erase operation is 
complete and even after Vpp transitions down to 
VPPL,the CUI must be reset to Read Array mode via 
the Read Array command when accesses to the 
flash memory are desired. 


ABSOLUTE 
MAXIMUM 
RATINGS· 
NOTI4E: 
This data sheet 
contains 
information 
on 
products in the sampling and initial production phases 
Commercial 
Operating 
Temperature 
of development. 
The 
specifications 
are subject 
to 
During Read 
O·C to 70·C(1) 
change 
without 
notice. 
Verify with your local 
Intel 


During Block 
Erase 
Sales office that you have the latest data sheet be- 
and Word/Byte 
Write 
O·C to 70·C 
Lf_o_re_fin_a_li_zi_n.::.g_a_d_e_s~ig:....n_. 
---l 
Temperature 
Under Bias 
-1 O·C to + 80"C 
• WARNING: Stressing the device beyond the "Absolute 
Extended 
Operating 
Temperature 
Maximum 
Ratings" 
may 
cause 
permanent 
damage. 


During Read 
- 40·C to + 85·C 
These are stress ratings 
only. Operation 
beyond 
the 
During Block 
Erase 
"Operating 
Conditions" 
is not recommended 
and ex- 


and Word/Byte 
Write 
-40·C 
to + 85·C 
tended 
exposure 
beyond 
the 
"Operating 
Conditions" 


Temperature 
Under Bias 
- 40·C to + 85·C 
may affect device reliability. 


Storage Temperature 
-65·C 
to + 125·C 


Voltage 
on Any Pin 
(except 
Vcc. VPP. As and RP#) 
with Respect 
to GND 
- 2.0V to + 7.0V(2) 


Voltage 
on Pin RP# 
or Pin As 
with Respect 
to GND 
..... 
- 2.0V to + 13.5V(2, 3) 


Vpp Program 
Voltage 
with Respect 
to GND during Block 
Erase 
and Word/Byte 
Write 
..... 
- 2.0V to + 14.0V(2, 3) 


VCC Supply Voltage 
with Respect 
to GND 
- 2.0V to + 7.0V(2) 


Output Short Circuit Current. 
100 mA(4) 
• 


NOTES: 
~ 
1. Operating temperature is for commercial product defined by this specification. 
2. Minimum DC voltage is -0.5V 
on input/output pins. During transitions, this level may undershoot to -2.0V 
for periods 


<20 ns. Maximum DC voltage on input/output pins is Vcc + 0.5V which, during transitions, may overshoot to Vcc + 2.0V 
for periods < 20 ns. 
3. Maximum DC voltage on Vpp may overshoot to + 14.0V for periods <20 ns. Maximum DC voltage on RP# or Ag may 
overshoot to 13.5V for periods < 20 ns. 
4. Output shorted for no more than one second. No more than one output shorted at a time. 
5. 10% Vcc 
specifications reference the 28F200BX-60/28F002BX-60 
in their standard test configuration. and the 
28F200BX-80/28F002BX-80. 
6. 5% Vcc specifications reference the 28F200BX-60/28F002BX-60 in their high speed test configuration. 


Symbol 
Parameter 
Notes 
Mln 
Max 
Units 


TA 
Operating 
Temperature 
0 
70 
·C 


Vcc 
Vcc Supply Voltage 
(10%) 
5 
4.50 
5.50 
V 


Vcc 
Vcc Supply Voltage 
(5%) 
6 
4.75 
5.25 
V 


Symbol 
Parameter 
Notes 
Mln 
Typ 
Max 
Unit 
Test Condition 


III 
Input Load Current 
1 
±1.0 
p,A 
Vcc = VccMax 
VIN = VCC or GND 


ILO 
Output Leakage 
Current 
1 
±10 
p,A 
VCC = VCCMax 


VOUT = VCCorGND 


Symbol 
Parameter 
Notes 
Mln 
Typ 
Max 
Unit 
Test Condition 


Ices 
Vee Standby 
Current 
1,3 
1.5 
mA Vee = VeeMax 


CE# = RP# = VIH 


100 
,..,AVee = VeeMax 


CE# = RP# = Vee 
±0.2V 


28F200BX: 
BYTE# 
= Vcc 
±0.2VorGND 


IceD 
Vee Deep Power-Down 
Current 
1 
0.20 
1.2 
,..,ARP# = GND ±0.2V 


ICCR 
Vee Read Current for 
1,5, 
20 
55 
mA 
Vee = Vee Max, CE# 
= GND 
28F200BX 
Word·Wide 
and 
6,10 
f = 10 MHz, lOUT = 0 mA 
Byte-Wide 
Mode and 
CMOS Inputs 
28F002BX 
Byte-Wide 
Mode 
20 
60 
mA 
Vee = Vee Max, CE# 
= Vil 


f = 10 MHz, lOUT = 0 mA 
TTL Inputs 


leew 
Vee Word Byte Write Current 
1,4 
65 
mA 
Word Write in Progress 


IeeE 
Vee Block Erase Current 
1,4 
30 
mA 
Block Erase in Progress 


leeES 
Vee Erase Suspend 
Current 
1,2 
5 
10 
mA 
Block Erase Suspended, 
CE# = VIH 


Ipps 
Vpp Standby Current 
1 
±15 
,..,AVpp 5: Vee 


Ippo 
Vpp Deep Power-Down 
Current 
1 
5.0 
,..,ARP# = GND ±0.2V 
RP# 


IpPR 
Vpp Read Current 
1 
200 
,..,AVpp> 
Vee 


Ippw 
Vpp Word Write Current 
1 
40 
mA 
Vpp = VPPH 
Word Write in Progress 


Ippw 
Vpp Byte Write Current 
1 
30 
mA 
Vpp = VPPH 
Byte Write in Progress 


IpPE 
Vpp Block Erase Current 
1 
30 
mA 
Vpp = VPPH 
Block Erase in Progress 


IpPES 
Vpp Erase Suspend 
Current 
1 
200 
,..,AVpp = VPPH 


Block Erase Suspended 


IRP# 
RP# 
Boot Block Unlock Current 
1,4 
500 
,..,ARP# = VHH 


110 
Ag Intelligent 
Identifier 
Current 
1,4 
500 
,..,AAg = VIO 


VIO 
Ag Intelligent 
Identifier 
Voltage 
11.5 
13.0 
V 


Vil 
Input Low Voltage 
-0.5 
0.8 
V 


VIH 
Input High Voltage 
2.0 
Vee + 0.5 
V 


Val 
Output Low Voltage 
0.45 
V 
Vee = VeeMin 
IOl = 5.8 mA 


Symbol 
Parameter 
Notes 
Min 
Typ 
Max 
Unit 
Test Condition 


VOH 
Output High Voltage 
2.4 
V 
VCC = VCCMin 
IOH = -2.5 
mA 


VPPL 
Vpp during Normal Operations 
3 
0.0 
6.5 
V 


VPPH 
Vpp during Erase/Write 
Operations 
7 
11.4 
12.0 
12.6 
V 


VPPH 
Vpp during Erase/Write 
Operations 
8 
10.8 
12.0 
13.2 
V 


VLKO 
Vee Erase/Write 
Lock Voltage 
2.0 
V 


VHH 
RP# 
Unlock Voltage 
11.5 
13.0 
V 
Boot Block Write/Erase 


Symbol 
Parameter 
Notes 
Mln 
Max 
Units 


TA 
Operating 
Temperature 
-40 
+85 
°C 


Vec 
Vee Supply Voltage 
(10%) 
5 
4.50 
5.50 
V 


Symbol 
Parameter 
Notes 
Mln 
Typ 
Max 
Unit 
Test Condition 


III 
Input Load Current 
1 
± 1.0 
/LA 
Vec = VceMax 
VIN = Vce or GND 


ILO 
Output Leakage Current 
1 
±10 
/LA 
Vee = VeeMax 
VOUT = Vcc or GND 


Ices 
Vce Standby Current 
1,3 
1.5 
mA 
Vce = Vee Max 
CE# 
= RP# 
= VIH 


100 
/LA 
Vec = VeeMax 
CE# 
= RP# 
= Vee ±0.2V 
28F200BX: 
BYTE# 
= Vec 
±0.2Vor 
GND 


IceD 
Vee Deep Power-Down 
Current 
1 
0.20 
8 
/LA 
RP# = GND ±0.2V 


leeR 
Vce Read Current for 
1,5, 
60 
mA 
Vee = Vce Max, CE# 
= GND 
28F200BX 
Word-Wide 
and 
6 
f = 10 MHz, lOUT = 0 mA 
Byte-Wide 
Mode and 
CMOS Inputs 
28F002BX 
Byte-Wide 
Mode 
65 
mA 
Vec = Vce Max, CE# 
= VIL 
f = 10 MHz, lOUT = 0 mA 
TIL 
Inputs 


Symbol 
Parameter 
Notes 
Mln 
Typ 
Max 
Unit 
Test Condition 


leew 
Vee Word Byte Write Current 
1 
70 
mA 
Word Write in Progress 


IeeE 
Vee Block Erase Current 
1 
40 
mA 
Block Erase in Progress 


leeES 
Vee Erase Suspend 
Current 
1,2 
5 
10 
mA 
Block Erase Suspended 
CE# 
= VIH 


IpPS 
Vpp Standby Current 
1 
±15 
/LA 
Vpp ~ Vee 


Ippo 
Vpp Deep Power-Down 
Current 
1 
5.0 
/LA 
RP# = GND ±0.2V 


IpPA 
Vpp Read Current 
1 
200 
/LA 
Vpp> 
Vee 


Ippw 
Vpp Word Write Current 
1 
40 
mA 
Vpp = VPPH 
Word Write in Progress 


Ippw 
Vpp Byte Write Current 
1 
30 
mA 
Vpp = VPPH 
Byte Write in Progress 


IpPE 
Vpp Block Erase Current 
1 
30 
mA 
Vpp = VpPH 
Block Erase in Progress 


IpPES 
Vpp Erase Suspend 
Current 
1 
200 
/LA 
Vpp = VPPH 
Block Erase Suspended 


IAP# 
RP# 
Boot Block Unlock Current 
1,4 
500 
/LA 
RP# = VHH 


110 
Ag Intelligent 
Identifier 
Current 
1 
500 
/LA 
Ag = VIO 


VID 
Ag Intelligent 
Identifier Voltage 
11.5 
13.0 
V 


VIL 
Input Low Voltage 
-0.5 
0.8 
V 


VIH 
Input High Voltage 
2.0 
Vee + 0.5 
V 


VOL 
Output 
Low Voltage 
0.45 
V 
Vee = VeeMin 
IOL = 5.8mA 


VOH 
Output High Voltage 
2.4 
V 
Vee = VeeMin 
IOH = -2.5mA 


VPPL 
Vpp during Normal Operations 
3 
0.0 
6.5 
V 


VPPH 
Vpp during Erase/Write 
Operations 
7 
11.4 
12.0 
12.6 
V 


VPPH 
Vpp during Erase/Write 
Operations 
8 
10.8 
12.0 
13.2 
V 


VLKO 
Vee Erase/Write 
Lock Voltage 
2.0 
V 


VHH 
RP# 
Unlock Voltage 
11.5 
13.0 
V 
Boot Block Write/Erase 


Symbol 
Parameter 
Typ 
Max 
Unit 
Condition 


CIN 
Input 
Capacitance 
6 
8 
pF 
VIN = OV 


COUT 
Output 
Capacitance 
10 
12 
pF 
VOUT = OV 


NOTES: 
1. All currents 
are in RMS unless 
otherwise 
noted. 
Typical 
values 
at VCC = 5.0V, Vpp = 12.0V, T = 25°C. These 
currents 
are valid for all product 
versions 
(packages 
and speeds). 
2. ICCES is specified 
with the device 
deselected. 
If the device 
is read while 
in Erase Suspend 
Mode, current 
draw is the sum 
of ICCES and ICCR. 
3. Block 
Erases 
and Word/By1e 
Writes 
are inhibited 
when 
Vpp = VpPL and not guaranteed 
in the range 
between 
VpPH and 


VPPL· 
4. Sampled, 
not 100% 
tested. 
5. Automatic 
Power Savings 
(APS) reduces 
ICCR to less than 
1 mA typical 
in static 
operation. 


6. CMOS 
Inputs are either Vcc 
±0.2V 
or GND 
±0.2V. 
TTllnputs 
are either 
VIL or VIH. 
7. VPP = 12.0V 
±5% 
for applications 
requiring 
100,000 
block 
erase cycles. 
8. VPP = 12.0V 
± 10% for applications 
requiring 
wider VPP tolerances 
at 100 block erase 
cycles. 
9. For the 28F002BX, 
address 
pin A10 follows 
the COUT capacitance 
numbers. 
10. ICCR typical 
is 25 mA for X16 active 
read current. 


2.4 __ 
IN_P_UT_X:::> T[S/~INTS 
<X::: 
OUTPUT 
0.45 
5\ 
290448-14 


AC 
test 
inputs 
are 
driven 
at 
VOH 
(2.4 
VTTL) 
for 
a 
logic 
"1" 
and 
VOL 


(0.45 
Vnu 
for 
a logic 
"0". 
Input 
timing 
begins 
at VIH (2.0 Vnu 
and 
VIL 


(0.8 Vnu. 
Output 
timing 
ends at VIH and VIL. Input rise and fall times 
(10% 


to 90%) 
< 10 ns. 


3.0 --IN-P-UT-X1.5-T[ST5~INTS_X1.5 
OUTPUT 


0.0 
5\ 
290448-22 


AC test 
inputs 
are driven 
at 3.0V for a logic 
"1" 
and O.OV for a logic 
"0". 
Input timing 
begins, 
and output 
timing 
ends, at 1.5V. Input rise and fall times 


(10% 
to 90%) < 10 ns. 


NOTES: 
1. Testing 
characteristics 
for 28F200BX-60/28F002BX-60 
in standard 
test config- 
uration 
and 28F200BX-80/28F002BX-80. 
2. Testing 
characteristics 
for 28F200BX-60/28F002BX-60 
in high speed 
test con- 


figuration. 


STANDARD 
AC TESTING 
LOAD CIRCUIT 


2:3':::' 
- 
lN914 
~ 


I\. 


DEVICE 
UNDER 
OUT 


TEST 
Ie;. 
- 
290448-13 


CL = 100 pF 
CL Includes 
Jig Capacitance 
RL = 3.3 KO 


HIGH SPEED AC TESTING 
LOAD CIRCUIT 


DEVICE 
UNDER 
TEST 


CL = 30 pF 
CL Includes 
Jig Capacitance 


RL = 3.3 KO 


• 


intel~ 


Vcc 
±5% 
VCC ± 10% 


Versions 
28F200BX-60(4) 
28F200BX-60(5) 
28F200BX-80(5) 
28F002BX-60(4) 
28F002BX-60(5) 
28F002BX-80(5) 
Unit 


Symbol 
Parameter 
Notes 
Min 
Max 
Min 
Max 
Mln 
Max 


tAVAV tRC 
Read Cycle Time 
60 
70 
80 
ns 


tAVQV tACC Address 
to 
60 
70 
80 
ns 
Output Delay 


tELQV teE 
CE # to Output Delay 
2 
60 
70 
80 
ns 


tpHQV tpWH RP# 
High to 
300 
300 
300 
ns 
Output Delay 


tGLQV toE 
OE # to Output Delay 
2 
30 
35 
40 
ns 


tELQX tLZ 
CE # to Output Low Z 
3 
0 
0 
0 
ns 


tEHQZ tHZ 
CE # High to Output 
3 
20 
25 
30 
ns 
HighZ 


tGLQX tOLZ 
OE # to Output Low Z 
3 
0 
0 
0 
ns 


tGHQZ tDF 
OE # High to Output 
3 
20 
25 
30 
ns 
HighZ 


toH 
Output Hold from 
3 
0 
0 
0 
ns 
Addresses, 
CE # or OE # Change, 
Whichever 
is First 


tELFL 
CEll' to BYTE # 
3 
5 
5 
5 
ns 
tELFH 
Switching 
Low or High 


tFHQV 
BYTE # Switching 
3,6 
60 
70 
80 
ns 
High to 
Valid Output Delay 


tFLQZ 
BYTE# 
Switching 
3 
20 
25 
30 
ns 
Low to 
Output High Z 


NOTES: 
1. See AC Input/Output Reference Waveform for timing measurements. 
2. OE# may be delayed up to teE-toE after the falling edge of CEll' without impact on teE. 
3. Sampled, not 100% tested. 
4. See High Speed Test Configuration. 
5. See Standard Test Configuration. 
6. tFLOV,BYTE# switching low to valid output delay, will be equal to tAYOY,measured from the time DQ1S/A-1 becomes 
valid. 


intelQP 


EXTENDED 
TEMPERATURE 
OPERATIONS 
AC CHARACTERISTICS-Read 
Only Operations(1): 


Versions 
T28F200BX·80(4) 
T28FOO2BX·80(4) 
Unit 


Symbol 
Parameter 
Notes 
Mln 
Max 


tAVAV 
tRC 
Read Cycle Time 
80 
ns 


tAVQV 
tACC 
Address 
to 
80 
ns 
Output Delay 


tELQV 
teE 
CE # to Output Delay 
2 
80 
ns 


tpHQV 
tpWH 
RP# 
High to 
300 
ns 
Output Delay 


tGLQV 
toE 
OE # to Output Delay 
2 
40 
ns 


tELQX 
tLZ 
CE # to Output Low Z 
3 
0 
ns 


tEHQZ 
tHZ 
CE # High to Output 
3 
30 
ns 
HighZ 


tGLQX 
toll 
OE # to Output Low Z 
3 
0 
ns 


tGHQZ 
tDF 
OE# 
High to Output 
3 
30 
ns 
HighZ 


toH 
Output Hold from 
3 
0 
ns 
Addresses, 
CE # or OE # Change, 
Whichever 
is First 


tELFL 
CE# 
to BYTE # 
3 
5 
ns 


tELFH 
Switching 
Low or High 


tFHQV 
BYTE # Switching 
3,5 
80 
ns 
High to 
Valid Output Delay 


tFLQZ 
BYTE # Switching 
3 
30 
ns 
Low to 
Output High Z 


NOTES: 
1. See AC Input/Output Reference Waveform for timing measurements. 
2. OE# may be delayed up to teE-toE after the falling edge of CE# without impact on teE. 
3. Sampled, not 100% tested. 
4. See Standard Test Configuration. 
5. tFLOV,BYTE# switching low to valid output delay, will be equal to tAVOV,measured from the time DQs/A-1 becomes 
valid. 
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Vcc 
±5% 
VCC ± 10% 


Versions 
28F200BX-60(9) 
28F200BX-6011O) 
28F200BX-8011O) 
28F002BX-60(9) 
28F002BX-6011O) 
28F002BX-8011O) 
Unit 


Symbol 
Parameter 
Notes 
Mln 
Max 
Min 
Max 
Mln 
Max 


tAVAV 
twc 
Write Cycle Time 
60 
70 
80 
ns 


tpHWl 
tps 
RP;if High 
215 
215 
215 
ns 
Recovery 
to 
WE;if Going Low 


tElWl 
les 
CE;if Setup to WE ;if 
0 
0 
0 
ns 
Going Low 


tpHHWH tpHS 
RP;if VHH Setup to 
6,8 
100 
100 
100 
ns 
WE;if Going High 


tVPWH 
tvps 
Vpp Setup to WE;if 
5,8 
100 
100 
100 
ns 
Going High 


tAVWH 
tAS 
Address 
Setup to 
3 
50 
50 
50 
ns 
WE;if Going High 


tOVWH 
tos 
Data Setup to WE;if 
4 
60 
60 
60 
ns 
Going High 


tWlWH 
twP 
WE;if Pulse Width 
50 
50 
50 
ns 


tWHOX 
tOH 
Data Hold from 
4 
0 
0 
0 
ns 
WE;if High 


tWHAX 
tAH 
Address 
Hold 
3 
10 
10 
10 
ns 
from WE;if High 


tWHEH 
tCH 
CE;if Hold from 
10 
10 
10 
ns 
WE;if High 


tWHWl 
tWPH WE;if Pulse 
10 
20 
30 
ns 
Width High 


tWHOV1 
Duration of 
2,5 
6 
6 
6 
/Ls 
Word/Byte 
Write 
Operation 


tWHOV2 
Duration of Erase 
2,5,6 
0.3 
0.3 
0.3 
s 
Operation 
(Boot) 


tWHOV3 
Duration of Erase 
2,5 
0.3 
0.3 
0.3 
s 
Operation 
(Parameter) 


tWHOV4 
Duration of Erase 
2,5,6 
0.6 
0.6 
0.6 
s 
Operation 
(Main) 


taWl 
tVPH Vpp Hold from 
5,8 
0 
0 
0 
ns 
ValidSRD 


intel~ 


Vcc 
±5% 
VCC ± 10% 


Versions 
28F200BX·60(9) 
28F200BX·60(10) 
28F200BX·80(10) 


28F002BX·60(9) 
28F002BX·60(10) 
28F002BX·80(10) 
Unit 


Symbol 
Parameter 
Notes 
Mln 
Max 
Min 
Max 
Mln 
Max 


taVPH 
tpHH 
RPi' 
VHH Hold 
6,8 
0 
0 
0 
ns 
from Valid SRD 


tpHBR 
Boot-Block 
7,8 
100 
100 
100 
ns 
Relock Delay 


NOTES: 
1. Read 
timing 
characteristics 
during 
write 
and erase 
operations 
are the same 
as during 
read-only 
operations. 
Refer to AC 
characteristics 
during 
Read Mode. 


2. The on-chip 
WSM 
completely 
automates 
program/erase 
operations; 
program/erase 
algorithms 
are now controlled 
inter- 


nally which 
includes 
verify and margining 
operations. 


3. Refer to command 
definition 
table for valid AIN. 


4. Refer to command 
definition 
table for valid DIN. 
5. Program/Erase 
durations 
are measured 
to valid SRD data (successful 
operation, 
SR.7= 
1). 


6. For Boot 
Block 
Program/Erase, 
RP# 
should 
be held at VHH until operation 
completes 
successfully. 


7. Time tpH6R is required 
for successful 
relocking 
of the Boot Block. 
8. Sampled 
but not 100% 
tested. 
9. See High Speed 
Test Configuration. 


10. See Standard 
Test Configuration. 


28F200BX-60 
28F200BX·80 


Parameter 
Notes 
28F002BX·60 
28F002BX·80 
Unit 


Mln 
Typ(1) 
Max 
Min 
Typ(1) 
Max 


Boot! Parameter 
2 
1.0 
7 
1.0 
7 
s 
Block Erase Time 


Main Block 
2 
2.4 
14 
2.4 
14 
s 
Erase Time 


Main Block Byte 
2 
1.2 
4.2 
1~2 
4.2 
s 
Program Time 


Main Block Word 
2 
0.6 
2.1 
0.6 
2.1 
s 
Program Time 


NOTES: 
1. 25°C 
2. Excludes 
System-Level 
Overhead. 


28F200BX·60 
28F200BX·80 


Parameter 
Notes 
28F002BX·60 
28F002BX·80 
Unit 


Mln 
Typ(1) 
Max 
Min 
Typ(1) 
Max 


Boot! Parameter 
2 
5.8 
40 
5.8 
40 
s 
Block Erase Time 


Main Block 
2 
14 
60 
14 
60 
s 
Erase Time 


Main Block Byte 
2 
6.0 
20 
6.0 
20 
s 
Program Time 


Main Block Word 
2 
3.0 
10 
3.0 
10 
s 
Program Time 


NOTES: 
1. 25°C 
2. Excludes 
System-Level 
Overhead. 
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EXTENDED 
TEMPERATURE 
OPERATION 
AC CHARACTERISTICS 
For WE II-Controlled 
Write Operations(1); 


Verslons(4) 
T28F200BX·80(9) 
T28FOO2BX·80(9) 
Unit 


Symbol 
Parameter 
Notes 
Min 
Max 


tAVAV 
twc 
Write Cycle Time 
80 
ns 


tpHWL 
tps 
RPII 
High Recovery 
to 
220 
ns 


WE II Going Low 


tELWL 
tes 
CE II Setup to WE II Going Low 
0 
ns 


tpHHWH 
tpHS 
RPII 
VHH Setup to WEll 
Going High 
6,8 
100 
ns 


tVPWH 
tvps 
Vpp Setup to WE II Going High 
5,8 
100 
ns 


tAVWH 
tAS 
Address 
Setup to WE II Going High 
3 
60 
ns 


tDVWH 
tDS 
Data Setup to WEll 
Going High 
4 
60 
ns 


tWLWH 
twP 
WE II Pulse Width 
60 
ns 


tWHDX 
tDH 
Data Hold from WE II High 
4 
0 
ns 


tWHAX 
tAH 
Address 
Hold from WE II High 
3 
10 
ns 


tWHEH 
teH 
CEil 
Hold from WEll 
High 
10 
ns 


tWHWL 
tWPH 
WEll' 
Pulse Width High 
20 
ns 


tWHOV1 
Duration of Word/Byte 
2,5 
7 
J.Ls 


Write Operation 


tWHOV2 
Duration of Erase Operation 
(Boot) 
2,5,6 
0.4 
s 


tWHOV3 
Duration of Erase 
2,5 
0.4 
s 


Operation 
.(Parameter) 


tWHOV4 
Duration of Erase Operation 
(Main) 
2,5,6 
0.7 
s 


taWL 
tVPH 
Vpp Hold from Valid SRD 
5,8 
0 
ns 


taVPH 
tpHH 
RPII VHH Hold from Valid SRD 
6,8 
0 
ns 


tpHBR 
Boot-Block 
Relock Delay 
7,8 
100 
ns 


NOTES: 
1. Read timing characteristics during write and erase operations are the same as during read-only operations. Refer to AC 
characteristics during Read Mode. 
2. The on-chip WSM completely automates program/erase operations; program/erase algorithms are now controlled inter- 
nally which includes verify and margining operations. 
3. Refer to command definition table for valid AIN. 
4. Refer to command definition table for valid DIN. 
5. Program/Erase durations are measured to valid SRD data (successful operation, SR.7= 1). 
6. For Boot Block Program/Erase, RPiI' should be held at VHHuntil operation completes successfully. 
7. Time tpHBRis required for successful relocking of the Boot Block. 
8. Sampled but not 100% tested. 
9. See Standard Test Configuration. 


EXTENDED 
TEMPERATURE 
OPERATION 
BLOCK 
ERASE 
AND WORD/BYTE 
WRITE 
PERFORMANCE: 
Vpp = 12.0V ±5% 


T28F200BX-80 


Parameter 
Notes 
T28FOO2BX-80 
Unit 


Mln 
Typ(l) 
Max 


Boot! Parameter 
2 
1.5 
10.5 
s 
Block Erase Time 


Main Block 
2 
3.0 
18 
s 
Erase Time 


Main Block Byte 
2 
1.4 
5.0 
s 
Program Time 


Main Block Word 
2 
0.7 
2.5 
s 
Program Time 


NOTES: 
1. 25'C, 12.DV Vpp. 
2. Excludes 
System-Level 
Overhead. 
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WRITE 


WRITE PROGRAM 
OR 
VALID 
ADDRESS 
&: 
DATA (PROGRAM) 
AUTOMATED 
PROGRAM 


ERASE 
SETUP 
COMMAND 
OR ERASE 
CONFIRM 
COMMAND 
OR ERASE 
DELAY 


I 


Vcc ±5% 
VCC ± 10% 


Versions 
2SF200BX-60(10) 
2SF200BX-60(11) 
2SF200BX-S0(11) 
2SF002BX-60(10) 
2SF002BX-60(11) 
2SF002BX-s0(11) 
Unl 


Symbol 
Parameter 
Notes 
Mln 
Max 
Mln 
Max 
Mln 
Max 


AVAV 
twc 
Write Cycle Time 
60 
70 
80 
ns 


PHEL 
tps 
RP# 
High Recovery 
215 
215 
215 
ns 
to CE # Going Low 


WLEL 
tws 
WE # Setup to CE # 
0 
0 
0 
ns 
Going Low 


PHHEHtpHS RP# 
VHH Setup to 
6,8 
100 
100 
100 
ns 
CE # Going High 


tvps 
Vpp Setup to CE # 
5,8 
100 
100 


, 


100 
VPEH 
ns 
Going High 


AVEH 
tAS 
Address 
Setup to 
3 
50 
50 
50 
ns 
CE # Going High 


OVEH tos 
Data Setup to CE # 
4 
60 
60 
60 
ns 
Going High 


ELEH 
tep 
CE # Pulse Width 
50 
50 
50 
ns 


EHOX tOH 
Data Hold from 
4 
0 
0 
0 
ns 
CE# 
High 


EHAX 
tAH 
Address 
Hold 
3 
10 
10 
10 
ns 
from CE # High 


EHWH tWH WE # Hold from CE # High 
10 
10 
10 
ns 


EHEL 
tePH CE# 
Pulse 
10 
20 
30 
ns 
Width High 


EHOVl 
Duration of Word/Byte 
2,5 
6 
6 
6 
fJ-s 
Programming 
Operation 


EHOV2 
Duration 
of Erase 
2,5,6 
0.3 
0.3 
0.3 
s 
Operation 
(Boot) 


EHOV3 
Duration 
of Erase 
2,5 
0.3 
0.3 
0.3 
s 
Operation 
(Parameter) 


EHOV4 
Duration of Erase 
2,5 
0.6 
0.6 
0.6 
s 
Operation 
(Main) 


taWL 
tVPH Vpp Hold from 
5,8 
0 
0 
0 
ns 
ValidSRD 


IQVPH tpHH RP# 
VHH Hold 
6,8 
0 
0 
0 
ns 
from Valid SRD 


PHBR 
Boot-Block 
Relock Delay 
7 
100 
100 
100 
ns 


NOTES: 
1. Chip-Enable Controlled Writes: Write operations are driven by the valid combination of CEII and WEII in systems where 
CEII defines the write pulse-width (within a longer WEII timing waveform), all set-up, hold and inactive WEII time should be 
measured relative to the CEII waveform. 
2,3,4,5,6,7,8: 
Refer to AC Characteristics notes for WEll-Controlled Write Operations. 
9. Read timing characteristics during write and erase operations are the same as during read-only operations. Refer to AC 
Characteristics during Read Mode. 
10. See High Speed Test Configuration. 
11. See Standard Test Configuration. 


EXTENDED 
TEMPERATURE 
OPERATION 
AC CHARACTERISTICS 
FOR CE#-CONTROLLED 
WRITE 
OPERATIONS(1,9) 


Versions 
T2SF200BX-SO(10) 
T2SFOO2BX-SO(10) 
Unit 


Symbol 
Parameter 
Notes 
Mln 
Max 


tAvAV 
twc 
Write Cycle Time 
80 
ns 


tpHEL 
tps 
RP'" 
High Recovery 
220 
ns 
to CE'" 
Going Low 


tWLEL 
tws 
WE'" 
Setup to CE '" 
0 
ns 
Going Low 


tpHHEH 
tpHS 
RP'" 
VHH Setup to 
6,8 
100 
ns 
CE'" 
Going High 


tVPEH 
tvps 
Vpp Setup to CE '" 
5,8 
100 
ns 
Going High 


tAVEH 
tAS 
Address 
Setup to 
3 
60 
ns 
CE'" 
Going High 


tOVEH 
tos 
Data Setup to CE '" 
4 
60 
ns 
Going High 


tELEH 
tcp 
CE'" 
Pulse Width 
60 
ns 


tEHOX 
tOH 
Data Hold from 
4 
0 
ns 
CE'" 
High 


tEHAX 
tAH 
Address 
Hold 
3 
10 
ns 
from CE'" 
High 


tEHWH 
tWH 
WE'" 
Hold from CE'" 
High 
10 
ns 


tEHEL 
tePH 
CE'" 
Pulse 
20 
ns 
Width High 


tEHOV1 
Duration of Word/Byte 
2,5 
7 
IJ-s 
Programming 
Operation 


tEHOV2 
Duration of Erase 
2,5,6 
0.4 
s 
Operation 
(Boot) 


tEHOV3 
Duration of Erase 
2,5 
0.4 
s 
Operation 
(Parameter) 


tEHOV4 
Duration of Erase 
2,5 
0.7 
s 
Operation 
(Main) 


taWL 
tVPH 
Vpp Hold from 
5,8 
0 
ns 
ValidSRD 


taVPH 
tpHH 
RP'" 
VHH Hold 
6,8 
0 
ns 
from Valid SRD 


tpHBR 
Boot-Block 
Relock Delay 
7 
100 
ns 


NOTES: 
1. Chip-Enable Controlled Writes: Write operations are driven by the valid combination of CEII and WEII in systems where 
CEII defines the write pulse-width (within a longer WEII timing waveform), all set-up, hold and inactive WEII time should be 
measured relative to the CEII waveform. 
2,3,4,5,6,7,8: 
Refer to AC Characteristics for WEll-Controlled Write Operations. 
9. Read timing characteristics during write and erase operations are the same as during read-only operations. Refer to AC 
Characteristics during Read Mode. 
10. See Standard Test Configuration. 
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OPERATING 
TEMPERATURE 
PACKAGE 


T 
= EXTENDED 
TEMP 
E 
= STANDARD 
56 
LEAD 
TSOP 
BLANK = COMMERCIAL 
TEMP 
PA = H 
LEAD 
PSOP 


TB = H 
LEAD 
PSOP. 
EXTENDED 
TEMP 


Valid Combinations: 
E28F200BX-T60 
E28F200BX-B60 
E28F200BX- 
T80 
E28F200BX-B80 


PA28F200BX-T60 
PA28F200BX-B60 
PA28F200BX-T80 
PA28F200BX-B80 
TE28F200BX- 
T80 
TE28F200BX-B80 
TB28F200BX- 
T80 
TB28F200BX-B80 


I 


OPERATING 
TEMPERATURE 
PACKAGE 


T 
= EXTENDED 
TEMP 
E 
= STANDARD 
40 
LEAD 
TSOP 


BLANK = COMMERCIAL 
TEMP 


Valid Combinations: 
E28F002BX- 
T60 
E28F002BX·B60 
E28F002BX-T80 
TE28F002BX-T80 
E28F002BX-B80 
TE28F002BX-B80 


Order 
Number 


290451 


290449 


290450 


292098 


204012 


294013 


28F400BX/28F004BX 
Datasheet 


28F200BXL/28F002BXL 
Datasheet 


28F400BXL/28F004BXL 
Datasheet 


AP-363 
"Extended 
Flash BIOS Design for Portable 
Computers" 


ER-28 "ETOX-1I1 Flash Memory Technology" 


ER-29 "The 
Intel2/4-Mbit 
Boot Block Flash Memory 
Family" 


Number 
Description 


-002 
Removed 
- 70 speed bin 
Integrated 
-70 
characteristics 
into -60 
speed bin 
Added Extended 
Temperature 
characteristics 


Modified 
BYTE # Timing Diagram 


Improved 
tpHQV, RP# 
High to Output Delay and tpHEL, RP# 
High Recovery 
to CE# 
going low 
specifications 


-003 
PWD changed 
to RP# 
for JEDEC standardization 
compatibility. 
Combined 
Vcc Read current for 28F200BX 
Word-wide 
mode and Byte-wide 
mode, and 


28F002BX 
Byte-wide 
mode in DC Characteristics 
tables. 


Change 
Ipps current spec from ± 10 IJ-Ato ± 15 IJ-Ain DC Characteristics 
tables. 


Improved 
ICCRand Iccw in DC Characteristics: 
Extended 
Temperature 
Operation 
table. 


Improved 
tAVAV. tAVQV. tELQV, tGLQV, tEHQZ, tGHQZ, tFHQV and tFLQZ specifications 
for 
Extended 
Temperature 
Operations 
AC Characteristics-Read 
and Write Operations. 
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28F200BX· TL/BL, 
28F002BX· TL/BL 
2·MBIT (128K x 16, 256K x 8) LOW POWER BOOT BLOCK 


FLASH MEMORY FAMILY 


• 
Low Voltage Operation for Very Low 
Power Portable Applications 
-Vee 
= 3.3V ±0.3V 


• 
xS/x16 Input/Output 
Architecture 
- 
2SF200BX-TL, 2SF200BX-BL 
- 
For High Performance and High 
Integration 
16-blt and 32·bit CPUs 


• 
xS-only Input/Output 
Architecture 
- 
2SF002BX-TL, 2SF002BX·BL 
- 
For Space Constrained S-bit 
Applications 


• 
Optimized High Density Blocked 
Architecture 
- 
One 16-KB Protected Boot Block 
- 
Two S-KB Parameter Blocks 
- 
One 96·KB Main Block 
- 
One 12S-KB Main Block 
- 
Top or Bottom Boot Locations 


• 
Extended Cycling Capability 
-10,000 
Block Erase Cycles 


• 
Automated 
Word/Byte 
Write and Block 
Erase 
- 
Command User Interface 
- 
Status Registers 
- 
Erase Suspend Capability 


• 
SRAM-Compatible Write Interface 


• 
Automatic 
Power Savings Feature 


- 
O.SmA Typical lee Active Current In 
Static Operation 


• 
Very High-Performance 
Read 


-150 
ns Maximum Access Time 
- 
65 ns Maximum Output Enable Time 


• 
Low Power Consumption 
- 
15 mA Typical Active Read Current 


• 
Reset/Deep 
Power-Down Input 
- 
0.2 ""A lee Typical 
- 
Acts as Reset for Boot Operations 


• 
Write Protection 
for Boot Block 


• 
Hardware Data Protection 
Feature 


- 
Erase/Write 
Lockout during Power 


Transitions 


• 
Industry Standard Surface Mount 
Packaging 
- 
2SF200BX-L: JEDEC ROM Compatible 


44·Lead PSOP 
56-Lead TSOP 


- 
2SF002BX-L: 40-Lead TSOP 


• 
12V Word/Byte 
Write and Block Erase 


- 
Vpp = 12V ± 5% Standard 


• 
ETOX III Flash Technology 
-3.3V 
Read 


• 
Independent Software Vendor Support 
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Intel's 2-Mbit 
Low Power Flash Memory 
Family is an extension 
of the Boot Block Architecture 
which 
includes 
block-selective 
erasure, 
automated 
write 
and erase operations 
and standard 
microprocessor 
interface. 
The 
2-Mbit 
Flash 
Memory 
Family 
enhances 
the 
Boot 
Block 
Architecture 
by adding 
more 
density 
and 
blocks, 
x8/x16 
input/output 
control, 
very low power, very high speed, 
an industry 
standard 
ROM compatible 
pinout 
and surface 
mount packaging. 
The 2-Mbit Low Power Flash Family opens a new capability 
for 3V battery-oper- 
ated portable 
systems 
and allows for an easy upgrade 
to Intel's 4-Mbit 
Low Power Boot Block Flash Memory 
Family. 


The Intel 28F200BX-TLlBL 
are 16-bit wide flash memory offerings. 
These high density flash memories 
provide 
user selectable 
bus operation 
for either 8-bit or 16-bit applications. 
The 28F200BX- TL and 28F200BX-BL 
are 
2,097,152-bit 
non-volatile 
memories 
organized 
as either 262,144 
bytes or 131,072 words of information. 
They 
are offered 
in 44-Lead 
plastic SOP and 56-Lead 
TSOP packages. 
The x8/x16 
pinout conforms 
to the industry 
standard 
ROM/EPROM 
pinout. 


The Intel 28F002BX-TL/BL 
are 8-bit wide flash memories 
with 2,097,152 
bits organized 
as 262,144 
bytes of 
information. 
They 
are offered 
in a 40-Lead 
TSOP 
package, 
which 
is ideal for space-constrained 
portable 
systems. 


These devices 
use an integrated 
Command 
User Interface 
(CUI) and Write State Machine 
(WSM) for simplified 
word/byte 
write and block erasure. The 28F200BX-TL/28F002BX-TL 
provide 
block locations 
compatible 
with 


Intel's 
low voltage 
MCS-186 
family, 
i386™, 
i486™ 
microprocessors. 
The 28F200BX-BL/28F002BX-BL 
pro- 
vide compatibility 
with Intel's 
80960KX 
and 80960SX 
families 
as well as other 
low voltage 
embedded 
micro- 
processors. 


The boot 
block 
includes 
a data protection 
feature 
to protect 
the boot code 
in critical 
applications. 
With 
a 
maximum 
access 
time of 150 ns, these 2-Mbit flash devices 
are very high performance 
low power 
memories 
which interface 
to a wide range of low power microprocessors 
and microcontrollers. 
A deep power-down 
mode 
lowers the total Vcc power consumption 
to 0.66 p.W. This is critical in handheld 
battery powered 
systems 
such 
as Handy 
Phones. 
For very 
high speed 
applications 
using a 5V supply, 
refer to the 
Intel 28F200BX- T/B, 
28F002BX-T/B 
2-Mbit 
Boot Block 
Flash Memory 
Family datasheet. 


Manufactured 
on Intel's 0.8 micron ETOX III process, 
the 2-Mbit low power flash memory family provides 
world 
class quality, 
reliability 
and cost-effectiveness 
at the 2-Mbit density 
level. 


Throughout this datasheet 28F200BX-L refers to 
both the 28F200BX-TL and 28F200BX-BL devices 
and 28F002BX-L refers to both the 28F002BX-TL 
and 28F002BX-BL devices. The 2-Mbit flash family 
refers to both the 28F200BX-L and 28F002BX-L 
products. This datasheet comprises the specifica- 
tions for four separate products in the 2-Mbit flash 
memory family. Section 1 provides an overview of 
the 2-Mbit flash memory family including applica- 
tions, pinouts and pin descriptions. Sections 2 and 3 
describe in detail the specific memory organizations 
for the 28F200BX-L and 28F002BX-L products re- 
spectively. Section 4 combines a description of the 
family's principles of operations. Finally, section 5 
describes the family's operating specifications. 


x8/x16 Products 
x8-0nly Products 


28F200BX-TL 
28F002BX-TL 


28F200BX-BL 
28F002BX-BL 


1.1 
Main Features 


The 
28F200BX-L/28F002BX-L 
low 
power 
boot 
block flash memory family is a very low power and 
very high performance 2-Mbit (2,097,152 bit) memo- 
ry family organized as either 128 Kwords (131,072 
words) of 16 bits each or 256 Kbytes (262,144 
bytes) of 8 bits each. 


Five separately 
Erasable Blocks including a Hard- 
ware-Lockable 
boot block (16,384 Bytes), two pa- 
rameter blocks (8,192 Bytes each) and two main 
blocks 
(1 block of 98,304 Bytes and 1 block of 


131,072 Bytes) are included on the 2-Mbit family. An 
erase operation erases one of the 5 blocks in typi- 
cally 3.4 seconds and the boot or parameter blocks 
in typically 2.0 seconds, independent of the remain- 
ing blocks. Each block can be independently erased 
and programmed 10,000 times. 


The 
Boot 
Block 
is located 
at either the top 


(28F200BX-TL, 
28F002BX-TL) 
or 
the 
bottom 


(28F200BX-BL, 28F002BX-BL) of the address map 
in order to accommodate different microprocessor 
protocols for boot code location. The hardware 
lockable boot block provides the most secure code 


storage. The boot block is intended to store the ker- 
nel code required for booting-up a system. When the 
RP# pin is between 11.4V and 12.6V the boot block 
is unlocked and program and erase operations can 
be performed. When the RP# pin is at or below 4.1V 
the boot block is locked and program and erase op- 
erations to the boot block are ignored. 


The 28F200BX-L products are available in the 
ROM/EPROM compatible pinout and housed in the 
44-Lead PSOP (Plastic Small Outline) package and 
the 56-Lead TSOP (Thin Small Outline, 1.2 mm 
thick) package as shown in Figures 3 and 4. The 
28F002BX-L products are available in the 40-Lead 
TSOP (1.2 mm thick) package as shown in Figure 5. 


The Command User Interface (CUI) serves as the 
interface between the microprocessor or microcon- 
troller and the internal operation of the 28F200BX·L 
and 28F002BX-L flash memory products. 


Program 
and Erase Automation 
allow program 


and erase operations to be executed using a two- 
write command sequence to the CUI. The internal 
Write State Machine (WSM) automatically executes 
the algorithms and timings necessary for program 
and erase operations, including verifications, there- 
by unburdening the microprocessor or microcontrol- 
ler. Writing of memory data is performed in word or 
byte increments for the 28F200BX-L family and in 
byte increments for the 28F002BX-L family typically 
within 11 /Ls. 


The Status Register (SR) indicates the status of the 
WSM and.whetherthe WSM successfully completed 
the desired program or erase operation. 


Maximum Access 
Time 
of 
150 ns 
(TACC) 
is 


achieved over the commercial temperature range 
(O·C to + 70·C), over Vcc supply voltage range 
(3.0V to 3.6V, 4.5V to 5.5V) and 50 pF output load. 


Ipp Program current is 40 mA for x16 operation 
and 30 mA for x8 operation. 
Ipp Erase current is 


30 mA maximum. Vpp erase and programming 
voltage Is 11.4V to 12.6V (Vpp = 12V ±5%) un- 
der ail operating conditions. 


Typical Icc Active Current of 15 mA is achieved 
for the x16 products and the x8 products. 


Tt e 2-Mbit flash family is also designed 
with an Au- 
tomatic 
Power 
Savings 
(APS) 
feature 
to 
minimize 
system 
battery 
current 
drain and allow for extremely 
low power designs. 
Once the device 
is accessed 
to 
read the array data, APS mode will immediately 
put 
the memory 
in static 
mode 
of operation 
where 
Ice 
active 
current 
is typically 
0.8 mA until the next read 
is initiated. 


When 
the CE# 
and RP# 
pins are at Vee and the 
BYTE# 
pin (28F200BX-L-only) 
is at either 
Vee 
or 
GND the 
CMOS 
Standby 
mode 
is enabled 
where 
lee is typically 
40 p.A. 


A Deep 
Power-down 
Mode 
is enabled 
when 
the 
RP# 
pin is at ground minimizing 
power consumption 
and providing 
write protection 
during power-up 
con- 
ditions. 
lee current 
during deep power-down 
mode 
is 0.20 p.A typical. 
An initial maximum 
access 
time 
or 
Reset 
Time 
of 
700 
ns is required 
from 
RP# 
switching 
until 
outputs 
are valid. 
Equivalently, 
the 
device 
has a maximum 
wake-up 
time of 580 ns until 
writes 
to the 
Command 
User 
Interface 
are recog- 
nized. When RP# 
is at ground the WSM is reset, the 
Status 
Register 
is cleared 
and the entire 
device 
is 
protected 
from 
being 
written 
to. This 
feature 
pre- 
vents 
data corruption 
and protects 
the code 
stored 
in the device during system 
reset. The system 
Reset 
pin can be tied to RP# 
to reset the memory 
to nor- 
mal read 
mode 
upon 
activation 
of the 
Reset 
pin. 
When the CPU enters reset mode, it expects 
to read 
the 
contents 
of 
a memory 
location. 
Furthermore, 
with 
on-chip 
program/erase 
automation 
in 
the 
2-Mbit family and the RP# 
functionality 
for data pro- 
tection, 
after the CPU is reset and even if a program 
or erase command 
is issued, the device will not rec- 
ognize any operation 
until RP# 
returns to its normal 
state. 


For the 28F200BX-L, 
Byte-wide 
or Word-wide 
In- 
put/Output 
Control 
is possible 
by controlling 
the 
BYTE # pin. When 
the BYTE # pin is at a logic low 
the device 
is in the byte-wide 
mode (x8) and data is 
read and written 
through 
DO(O:7). 
During the byte- 
wide mode, 
DO(8:14) 
are tri-stated 
and D01S/A-1 
becomes 
the 
lowest 
order 
address 
pin. When 
the 
BYTE # 
pin is at a logic 
high the 
device 
is in the 
word-wide 
mode 
(x16) and data is read and written 
through 
DO(O:15). 


The 2-Mbit low power boot block flash memory fami- 
ly combines 
high 
density, 
3V operation, 
high 
per- 
formance, 
cost-effective 
flash memories 
with block- 
ing and hardware 
protection 
capabilities. 
Its flexibility 
and versatility 
will reduce costs throughout 
the prod- 
uct life cycle. Flash memory 
is ideal for Just-In-Time 


production 
flow, 
reducing 
system 
inventory 
and 
costs, 
and 
eliminating 
component 
handling 
during 
the production 
phase. 
During the product 
life cycle, 
when 
code 
updates 
or feature 
enhancements 
be- 
come 
necessary, 
flash 
memory 
will reduce 
the up- 
date costs' by allowing 
either a user-performed 
code 
change 
via floppy disk or a remote 
code change 
via 
a serial 
link. The 
2-Mbit 
boot 
block 
flash 
memory 
family provides 
full function, 
blocked 
flash memories 
suitable 
for a wide range of applications. 
These 
ap- 
plications 
include 
Extended 
PC BIOS, Handy 
Digi- 
tal Cellular 
Phone 
program 
and data 
storage 
and 
various other portable 
embedded 
applications 
where 
both program 
and data storage 
are required. 


Reprogrammable 
systems 
such 
as Notebook 
and 
Palmtop 
computers, 
are 
ideal 
applications 
for 
the 
2-Mbit 
low power flash 
products. 
Portable 
and han- 
dheld personal 
computer 
applications 
are becoming 
more complex 
with the addition 
of power 
manage- 
ment software 
to take advantage 
of the latest micro- 
processor 
technology, 
the availability 
of ROM-based 
application 
software, 
pen tablet 
code 
for electronic 
handwriting, 
and diagnostic 
code. Figure 1 shows an 
example 
of a 28F200BX-TL 
application. 


This 
increase 
in software 
sophistication 
augments 
the probability 
that 
a code 
update 
will be required 
after the PC is shipped. 
The 2-Mbit 
low power flash 
memory 
products 
provide 
an inexpensive 
update so- 
lution for the notebook 
and handheld 
personal 
com- 
puters 
while 
extending 
their 
product 
lifetime. 
Fur- 
thermore, 
the 2-Mbit 
flash 
memory 
products' 
deep 
power-down 
mode 
provides 
added 
flexibility 
for 
these 
battery-operated 
portable 
designs 
which 
re- 
quire operation 
at extremely 
low power 
levels. 


The 
2-Mbit 
low power 
flash 
products 
also 
provide 
excellent 
design 
solutions 
for Handy 
Digital Cellular 
Phone 
applications 
requiring 
high 
density 
storage, 
high performance 
capabilities 
coupled 
with low volt- 
age operation, 
and a small form factor 
package 
(x8- 
only bus). The 2-Mbit's 
blocking 
scheme 
allows 
for 
an easy segmentation 
of the embedded 
code with: 
16 Kbytes of Hardware-Protected 
Boot code, 2 Main 
Blocks 
of program 
code and 2 Parameter 
Blocks 
of 
8 Kbytes each for frequently 
updatable 
data storage 
and diagnostic 
messages 
(e.g., phone 
numbers, 
au- 
thorization 
codes). 
Figure 2 is an example 
of such an 
application 
with the 28F002BX-TL. 


These 
are a few actual examples 
of the wide range 
of applications 
for the 2-Mbit 
Low Power Boot Block 
flash 
memory 
family 
which 
enables 
system 
design- 
ers 
to 
achieve 
the 
best 
possible 
product 
design. 
Only your imagination 
limits the applicability 
of such 
a versatile 
low power product 
family. 
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The 28F200BX-L 44-Lead PSOP pinout follows the 
industry standard ROM/EPROM pinout as shown in 
Figure 3 with 
an 
upgrade to 
the 
28F400BX-L 


(4-Mbit 
low 
power 
flash 
family). 
Furthermore, 
the 28F200BX-L 56-Lead TSOP piMoUt shown in 


28F400BX-L~;;jt~fut~r-;; 
'higher-d;~;itY-bo~t block 


memories. 


The 28F002BX-L 40-Lead TSOP pinout shown in 
Figure 5 is 100% compatible and has a density up- 
grade to the 28F004BX-L 4-Mbit Low Power Boot 
Block flash memory. 
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Figure 3. PSOP Lead Configuration 
for x8/x16 
28F200BX-L 
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Symbol 
Type 
Name and Function 


Ao-A16 
I 
ADDRESS 
INPUTS for memory addresses. 
Addresses 
are internally 
latched 


during a write cycle. 


A9 
I 
ADDRESS 
INPUT: When A9 is at 12V the signature 
mode is accessed. 
During this 
mode Ao decodes 
between 
the manufacturer 
and device ID's. When BYTE# 
is at 


a logic low only the lower byte of the signatures 
are read. 0015/ A-1 
is a don't 


care in the signature 
mode when BYTE# 
is low. 


DOO-DO? 
I/O 
DATA INPUTS/OUTPUTS: 
Inputs array data on the second CE # and WE # cycle 
during a program command. 
Inputs commands 
to the command 
user interface 


when CE # and WE # are active. Data is internally 
latched during the write and 
program 
cycles. Outputs 
array, Intelligent 
Identifier 
and Status Register data. The 
data pins float to tri-state when the chip is deselected 
or the outputs are disabled. 


008-0015 
I/O 
DATA INPUT/OUTPUTS: 
Inputs array data on the second 
CE# 
and WE# 
cycle 
during a program command. 
Data is internally 
latched during the write and program 
cycles. Outputs array data. The data pins float to tri-state when the chip is 
deselected 
or the outputs are disabled 
as in the byte-wide 
mode (BYTE # = "0"). 


In the byte-wide 
mode 0015/ A-1 
becomes 
the lowest order address for data 


output on DOo-DO? 


CE# 
I 
CHIP ENABLE: Activates 
the device's 
control 
logic, input buffers, decoders 
and 
sense amplifiers. 
CE # is active low; CE # high deselects 
the memory device and 


reduces power consumption 
to standby 
levels. If CE # and RP# are high, but not 
at a CMOS high level, the standby current will increase 
due to current flow through 


the CE# 
and RP# 
input stages. 


RP# 
I 
RESET/DEEP 
POWER-DOWN: 
Provides Three-State 
control. 
Puts the device in 
deep power-down 
mode. Locks the boot block from program/erase. 


When RP # is at logic high level and equals 4.1 V maximum 
the boot block is 
locked and cannot 
be programmed 
or erased. 


When RP# 
= 11.4V minimum the boot block is unlocked 
and can be programmed 


or erased. 


When RP# 
is at a logic low level the boot block is locked, the deep power-down 
mode is enabled and the WSM is reset preventing 
any blocks from being 


programmed 
or erased, therefore 
providing 
data protection 
during power 
transitions. 
When RP# transitions 
from logic low to logic high, the flash memory 
enters the read-array 
mode. 


OE# 
I 
OUTPUT 
ENABLE: Gates the device's 
outputs through the data buffers during a 
read cycle. OE# 
is active low. 


WE# 
I 
WRITE 
ENABLE: Controls 
writes to the Command 
Register and array blocks. 
WE # is active low. Addresses 
and data are latched on the rising edge of the WE # 


pulse. 


• 


Symbol 
Type 
Name and Function 


BYTE# 
I 
BYTE # ENABLE: Controls 
whether 
the device operates 
in the byte-wide 
mode (x8) or 
the word-wide 
mode (x16). BYTE # = "0" enables the byte-wide 
mode, where data is 


read and programmed 
on OOO-OO? and 0015/A-1 becomes 
the lowest order 
address that decodes 
between 
the upper and lower byte. 008-0014 
are tri-stated 
during the byte-wide 
mode. BYTE # = "1" enables the word-wide 
mode where data is 


read and programmed 
on 000-0015. 


Vpp 
PROGRAM/ERASE 
POWER SUPPLY: For erasing memory array blocks or 


programming 
data in each block. 


Note: Vpp < VPPLMAX memory contents 
cannot 
be altered. 


Vcc 
DEVICE 
POWER SUPPLY (3.3V 
±0.3V, 
5V ± 10%) 


GNO 
GROUND: 
For all internal circuitry. 


NC 
NO CONNECT: 
Pin may be driven or left floating. 


OU 
DON'T USE PIN: Pin should not be connected 
to anything. 


Symbol 
Type 
Name and Function 


Ao-A17 
I 
ADDRESS 
INPUTS for memory addresses. 
Addresses 
are internally 
latched during 


a write cycle. 


Ag 
I 
ADDRESS 
INPUT: When Ag is at 12V the signature 
mode is accessed. 
During this 


mode Ao decodes 
between 
the manufacturer 
and device ID's. 


000-007 
I/O 
DATA INPUTS/OUTPUTS: 
Inputs array data on the second CE# 
and WE# 
cycle 


during a program command. 
Inputs commands 
to the command 
user interface 
when CE # and WE # are active. Data is internally 
latched during the write and 
program 
cycles. Outputs 
array Intelligent 
Identifier and status register data. The 
data pins float to tri-state 
when the chip is deselected 
or the outputs are disabled. 


CE# 
I 
CHIP ENABLE: Activates 
the device's 
control 
logic, input buffers, decoders 
and 


sense amplifiers. 
CE # is active low; CE # high deselects 
the memory device and 


reduces power consumption 
to standby levels. 


RP# 
I 
RESET/DEEP 
POWER· DOWN: Provides Three-State 
control. 
Puts the device in 


deep power-down 
mode. Locks the Boot Block from program/erase. 


When RP # is at logic high level and equals 4.1 V maximum 
the Boot Block is locked 
and cannot 
be programmed 
or erased. 


When RP# 
= 11.4V minimum the Boot Block is unlocked 
and can be programmed 


or erased. 


When RP# 
is at a logic low level the Boot Block is locked, the deep power-down 


mode is enabled 
and the WSM is reset preventing 
any blocks from being 
programmed 
or erased, therefore 
providing 
data protection 
during power 
transitions. 
When RP# 
transitions 
from logic low to logic high, the flash memory 
enters the read-array 
mode. 


OE# 
I 
OUTPUT 
ENABLE: Gates the device's 
outputs through 
the data buffers during a 


read cycle. DE # is active low. 


WE# 
I 
WRITE 
ENABLE: Controls 
writes to the Command 
Register and array blocks. WE # 
is active low. Addresses 
and data are latched on the rising edge of the WE# 
pulse. 


Vpp 
PROGRAM/ERASE 
POWER SUPPLY: For erasing memory array blocks or 
programming 
data in each block. 


Note: Vpp < VPPLMAX memory contents 
cannot 
be altered. 


Vcc 
DEVICE 
POWER SUPPLY (3.3V ±0.3V, 5V ± 10%) 


GND 
GROUND: 
For all internal circuitry 


NC 
NO CONNECT: 
Pin may be driven or left floating 


DU 
DON'T USE PIN: Pin should not be connected 
to anything 
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The 28F200BX-L uses a blocked array architecture 
to provide independent erasure of memory blocks. A 
block is erased independently of other blocks in the 
array when an address is given within the block ad- 
dress range and the Erase Setup and Erase Confirm 
commands are written to the CUI. The 28F200BX-L 
is a random read/write memory, only erasure is per- 
formed by block. 


2.1.1.1 Boot Block Operation and Data 


Protection 


The 16-Kbyte boot block provides a lock feature for 
secure code storage. The intent of the boot block is 
to provide a secure storage area for the kernel code 
that is required to boot a system in the event of pow- 
er failure or other disruption during code update. 
This lock feature ensures absolute data integrity by 
preventing the boot block from being written or 
erased when RP# is not at 12V. The boot block can 
be erased and written when RP# is held at 12V for 
the duration of the erase or program operation. This 
allows customers to change the boot code when 
necessary while providing security when needed. 
See the Block Memory Map section for address lo- 
cations of the boot block for the 28F200BX-TL and 
28F200BX-BL. 


2.1.1.2 Parameter Block Operation 


The 28F200BX-L has 2 parameter blocks (8 Kbytes 
each). The parameter blocks are intended to pro- 
vide storage for frequently updated system parame- 
ters and configuration or diagnostic information. The 
parameter blocks can also be used to store addition- 
al boot or main code. The parameter blocks howev- 
er, do not have the hardware write protection feature 
that the boot block has. The parameter blocks pro- 
vide for more efficient memory utilization when deal- 
ing 
with 
parameter 
changes 
versus 
reg-ularly 


blocked devices. See the Block Memory Map sec- 
tion for address locations of the parameter blocks 
for the 28F200BX-TL and 28F200BX-BL. 


2.1.1.3 Main Block Operation 


Two 
main 
blocks 
of 
memory 
exist 
on 
the 
28F200BX-L (1 x 128-Kbyte block and 1 x 96-Kbyte 
blocks). See the following section on Block Memory 
Map for the address location of these blocks for the 
28F200BX-TL and 28F200BX-BL products. 


Two versions of the 28F200BX-L product exist to 
support two different memory maps of the array 
blocks in order to accommodate different micropro- 
cessor 
protocols 
for 
boot 
code 
location. 
The 


28F200BX-TL memory map is inverted from the 
28F200BX-BL memory map. 


2.1.2.1 28F200BX-BL Memory Map 


The 28F200BX-BL device has the 16-Kbyte boot 
block located from OOOOOHto 01FFFH to accom- 
modate those microprocessors that boot from the 
bottom of the address map at OOOOOH.In the 
28F200BX-BL the first 8-Kbyte parameter block re- 
sides in memory space from 02000H to 02FFFH. 
The second 8-Kbyte parameter block resides in 
memory space 
from 
03000H 
to 
03FFFH. The 


96-Kbyte main block resides in memory space from 
04000H to OFFFFH. The 128-Kbyte main block re- 
sides in memory space from 10000H to 1FFFFH 
(word locations). See Figure 7. 
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16-Kbyte 
BOOT 
BLOCK 
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03FFFH 


03000H 


02FFFH 


02000H 


01FFFH 


The 28F200BX-TL device has the 16-Kbyte boot 
block located from 1EOOOHto 1FFFFH to accommo- 
date those microprocessors that boot from the top 
of the address map. In the 28F200BX-TL the first 
8-Kbyte parameter block resides in memory space 
from 1DOOOHto 1DFFFH. The second 8-Kbyte pa- 
rameter 
block 
resides 
in 
memory 
space 
from 
1COOOHto 1CFFFH. The 96-Kbyte main block re- 
sides in memory space from 10000H to 1BFFFH. 
The 128-Kbyte main block resides in memory space 
from OOOOOHto OFFFFH as shown below in Figure 
8. 


1EOOOH 
1DFFFH 


10000H 
1CFFFH 


1COOOH 
1BFFFH 


The 28F002BX-L uses a blocked array architecture 
to provide independent erasure of memory blocks. A 
block is erased independently of other blocks in the 
array when an address is given within the block ad- 
dress range and the Erase Setup and Erase Confirm 
commands are written to the CUI. The 28F002BX-L 
is a random read/write memory, only erasure is per- 
formed by block. 


3.1.1.1 
Boot Block Operation 
and Data 
Protection 


The 16-Kbyte boot block provides a lock feature for 
secure code storage. The intent of the boot block is 
to provide a secure storage area for the kernel code 
that is required to boot a system in the event of pow- 
er failure or other disruption during code update. 
This lock feature ensures absolute data integrity by 
preventing the boot block from being programmed 
or erased when RP# is not at 12V. The boot block 
can be erased and programmed when RP# is held 
at 12V for the duration of the erase or program oper- 
ation. This allows customers to change the boot 
code when necessary while still providing security 
when needed. See the Block Memory Map section 
for address locations of the boot block for the 
28F002BX-TL and 28F002BX-BL. 


3.1.1.2 
Parameter 
Block Operation 


The 28F002BX-L has 2 parameter blocks (8 Kbytes 
each). The parameter blocks are intended to pro- 
vide storage for frequently updated system parame- 
ters and configuration or diagnostic information. The 
parameter blocks can also be used to store addition- 
al boot or main code. The parameter blocks howev- 
er, do not have the hardware write protection feature 
that the boot block has. Parameter blocks provide 
for more efficient memory utilization when dealing 
with 
small 
parameter changes 
versus 
regularly 
blocked devices. See the Block Memory Map sec- 
tion for address locations of the parameter blocks 
for the 28F002BX-TL and 28F002BX-BL. 


3.1.1.3 
Main Block Operation 


Two 
main 
blocks 
of 
memory 
exist 
on 
the 
28F002BX-L (1 x 128-Kbyte block and 1 x 96-Kbyte 
block). 


See the following section on Block Memory Map for 
the 
address 
location 
of 
these 
blocks 
for 
the 


28F002BX-TL and 28F002BX-BL. 


Two versions of the 28F002BX-L product exist to 
support two different memory maps of the array 
blocks in order to accommodate different microproc- 
essor 
protocols 
for 
boot 
code 
10cColtion.The 


28F002BX-TL memory map is inverted from the 
28F002BX-BL memory map. 


3.1.2.1 
28F002BX·BL 
Memory 
Map 


The 28F002BX-BL device has the 16-Kbyte boot 
block located from OOOOOH 
to 03FFFH to accommo- 


date those microprocessors that boot from the bot- 
tom 
of 
the 
address 
map 
at 
OOOOOH.In 
the 


28F002BX-BL the first 8-Kbyte parameter block re- 
sides in memory from 04000H to 05FFFH. The sec- 
ond 8-Kbyte parameter block resides in memory 
space from 06000H to 07FFFH. The 96-Kbyte main 
block resides in memory space from 08000H to 
1FFFFH. The 128-Kbyte main block resides in mem- 
ory space from 20000H to 3FFFFH. See Figure 10. 
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07FFFH 
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03FFFH 


3.1.2.2 28F002BX·TL Memory Map 


The 28F002BX-TL device has the 16-Kbyte boot 
block located trom 3COOOHto 3FFFFH to accom- 
modate those microprocessors that boot from the 
top of the address map. In the 28F002BX-TL the first 
8-Kbyte parameter block resides in memory space 
from 3AOOOHto 3BFFFH. The second 8-Kbyte pa- 
rameter 
block 
resides 
in 
memory space 
from 
38000H to 39FFFH. The 96-Kbyte main block re- 
sides in memory space from 20000H to 37FFFH. 
The 128-Kbyte main block resides in memory space 
from OOOOOHto 1FFFFH. 
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4.0 
PRODUCT 
FAMILY 
PRINCIPLES 
OF OPERATION 


Flash memory augments EPROM functionality with 
in-circuit electrical write and erase. The 2-Mbit flash 
family utilizes a Command User Interface (CUI) and 
internally generated and timed algorithms to simplify 
write and erase operations. 


The CUI allows for fixed power supplies during era- 
sure and programming, and maximum EPROM com- 
patibility. 


In the absence of high voltage on the Vpp pin, the 
2-Mbit flash family will only successfully execute the 
following commands: Read Array, Read Status Reg- 
ister, Clear Status Register and Intelligent Identifier 
mode. The device provides standard EPROM read, 
standby and output disable operations. Manufactur- 
er Identification and Device Identification data can 
be accessed through the CUI or through the stan- 
dard EPROM A9 high voltage access (VIO) (for 
PROM programmer equipment). 


The same EPROM read, standby and output disable 
functions are available when high voltage is applied 
to the Vpp pin. In addition, high voltage on Vpp al- 
lows write and erase of the device. All functions as- 
sociated with altering memory contents: write and 
erase, Intelligent Identifier read and Read Status are 
accessed via the CUI. 


The purpose of the Write State Machine (WSM) is to 
completely automate the write and erasure of the 
device. The WSM will begin operation upon receipt 
of a signal from the CUI and will report status back 
through a Status Register. The CUI will handle the 
WE# interface to the data and address latches, as 
well as system software requests for status while the 
WSM is in operation. 


Flash memory reads, erases and writes in-system 
via the local CPU. All bus cycles to or from the flash 
memory conform to standard microprocessor bus 
cycles. 
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Mode 
Notes 
RP# 
CE# 
OE# 
WE# 
Ag 
Ao 
Vpp 
OQO-15 


Read 
, 
1,2,3 
VIH 
VIL 
VIL 
VIH 
X 
X 
X 
DOUT 


Output Disable 
VIH 
VIL 
VIH 
VIH 
X 
X 
X 
HighZ 


Standby 
VIH 
VIH 
X 
X 
X 
X 
X 
HighZ 


Deep Power-Down 
9 
VIL 
X 
X 
X 
X 
X 
X 
HighZ 


Intelligent 
Identifier 
(Mfr) 
4 
VIH 
VIL 
VIL 
VIH 
VID 
VIL 
X 
0089H 


Intelligent 
Identifier 
(Device) 
4,5, 
VIH 
VIL 
VIL 
VIH 
VID 
VIH 
X 
2274H 


10 
2275H 


Write 
6,7,8 
VIH 
VIL 
VIH 
VIL 
X 
X 
X 
DIN 


Mode 
Notes 
RP# 
CE# 
OE# 
WE# 
Ag 
Ao 
A-1 
Vpp 
OQO-7 
OQ8-14 


Read 
1,2,3 
VIH 
VIL 
VIL 
VIH 
X 
X 
X 
X 
DOUT 
HighZ 


Output Disable 
VIH 
VIL 
VIH 
VIH 
X 
X 
X 
X 
HighZ 
HighZ 


Standby 
VIH 
VIH 
X 
X 
X 
X 
X 
X 
HighZ 
HighZ 


Deep Power-Down 
9 
VIL 
X 
X 
X 
X 
X 
X 
X 
HighZ 
HighZ 


Intelligent 
Identifier 
4 
VIH 
VIL 
VIL 
VIH 
VID 
VIL 
X 
X 
89H 
HighZ 
(Mfr) 


Intelligent 
Identifier 
4,5 
VIH 
VIL 
VIL 
VIH 
VID 
VIH 
X 
X 
74H 
HighZ 
(Device) 
75H 


Write 
6,7,8 
VIH 
VIL 
VIH 
VIL 
X 
X 
X 
X 
DIN 
HighZ 


NOTES: 
1. Refer to DC Characteristics. 
2. X can be VIL or VIH for control 
pins and addresses, 
VPPL or VPPH for Vpp. 


3. See DC characteristics 
for VPPL, VPPH, VHH, VIO voltages. 
4. Manufacturer 
and Device 
codes 
may also be accessed 
via a CPU write sequence. 
Al-A16 = VIL. 


5. Device 
10 = 2274H 
for 28F200BX-TL 
and 2275H 
for 28F200BX-BL. 


6. Refer to Table 
4 for valid DIN during a write operation. 
7. Command 
writes 
for Block 
Erase or Word/Byte 
Write are only executed 
when VPP = VPPH. 
8. To write or erase the boot block, 
hold RP# 
at VHH. 
9. RP# 
must be at GND 
±O.2V 
to meet the 1.2 p.A maximum 
deep power-down 
current. 


10. The device 
10 codes 
are identical 
to those 
of the 28F2100BX 
5V versions. 


4.2 28F002BX-LBus Operations 


Table 3. Bus Operations 


Mode 
Notes 
RP# 
CE# 
OE# 
WE# 
Ag 
Ao 
Vpp 
000-7 


Read 
1,2,3 
VIH 
VIL 
VIL 
VIH 
X 
X 
X 
DOUT 


Output Disable 
VIH 
VIL 
VIH 
VIH 
X 
X 
X 
HighZ 


Standby 
VIH 
VIH 
X 
X 
X 
X 
X 
HighZ 


Deep Power-Down 
9 
VIL 
X 
X 
X 
X 
X 
X 
HighZ 


Intelligent Identifier (Mfr) 
4 
VIH 
VIL 
VIL 
VIH 
VID 
VIL 
X 
89H 


Intelligent Identifier (Device) 
4,5 
VIH 
VIL 
VIL 
VIH 
VID 
VIH 
X 
7CH 
7DH 


Write 
6,7,8 
VIH 
VIL 
VIH 
VIL 
X 
X 
X 
DIN 


NOTES: 
1. Refer to DC Characteristics. 
2. X can be VIL or VIH for control 
pins and addresses, 
VPPL or VPPH for Vpp. 


3. See DC characteristics 
for VPPL, VPPH, VHH, VID voltages. 
4. Manufacturer 
and Device 
codes 
may also be accessed 
via a CUI write sequence. 
A1-A17 = VIL. 
5. Device 
ID = 7CH for 28F002BX-TL 
and 7DH for 28F002BX-BL. 


6. Refer to Table 
4 for valid DIN during 
a write operation. 
7. Command 
writes 
for Block erase or byte program 
are only executed 
when 
Vpp = VPPH. 
8. Program 
or erase 
the Boot block 
by holding 
RP# 
at VHH. 


g. RP# 
must be at GND 
±0.2V 
to meet the 1.2 p,A maximum 
deep power-down 
current. 


10. The device 
ID codes 
are identical 
to those 
of the 28F002BX 
5V versions. 


4.3 Read Operations 


The 2-Mbit flash family has three user read modes; 
Array, Intelligent Identifier, and Status Register. 
Status Register read mode will be discussed in detail 
in the "Write Operations" section. 


During power-up conditions (VCCsupply ramping), it 
takes a maximum of 700 ns from VCCat 3.0V mini- 
mum to obtain valid data on the outputs. 


If the memory is not in the Read Array mode, it is 
necessary to write the appropriate read mode com- 
mand to the CUI. The 2-Mbit flash family has three 
control functions, all of which must be logically ac- 
tive, to obtain data at the outputs. Chip-Enable CE# 
is the device selection control. Power-Down RP# is 
the device power control. Output-Enable OE# is the 
DATA INPUT/OUTPUT (DO[0:15] or DO[0:7]) direc- 
tion control and when active is used to drive data 
from the selected memory on to the I/O bus. 


4.3.1.1 Output Control 


With OE# at logic-high level (VIH),the output from 
the device is disabled and data input/ output pins 
(DO[0:15] or DO[0:7]) are tri-stated. Data input is 
then controlled by WE# . 


4.3.1.2 input Control 


With WE# at logic-high level (VIH),input to the de- 
vice is disabled. Data Input/Output pins (DO[0:15] 
or DO[0:7]) are controlled by OE#. 


The manufacturer and device codes are read via the 
CUI or by taking the Ag pin to 12V. Writing 90H to 
the CUI places the device into Intelligent Identifier 
read mode. A read of location OOOOOH outputs the 
manufacturer's identification code, 0089H, and loca- 
tion 00001H 
outputs the device code; 2274H for 


28F200BX-TL, 
2275H 
for 
28F200BX-BL. 
When 


BYTE# is at a logic low only the lower by1eof the 
above signatures is read and D015/ A-1 is a "don't 
care" during Intelligent Identifier mode. A read array 
command must be written to the CUI to return to the 
read array mode. 


• 


The manufacturer and device codes are also read 
via the CUI or by taking the Ag pin to 12V. Writing 
90H to the CUI places the device into Intelligent 
Identifier read mode. A read of location OOOOOH 
outputs the manufacturer's identification code, 89H, 
and location 00001H outputs the device code; 7CH 
for 28F002BX-TL, 7DH for 28F002BX-BL. 


Commands are written to the CUI using standard mi- 
croprocessor write timings. The CUI serves as the 
interface between the microprocessor and the inter- 
nal chip operation. The CUI can decipher Read Ar- 
ray, Read Intelligent Identifier, Read Status Register, 
Clear Status Register, Erase and Program com- 
mands. In the event of a read command, the CUI 
simply points the read path at either the array, the 
Intelligent Identifier, or the status register depending 
on the specific read command given. For a program 
or erase cycle, the CUI informs the write state ma- 
chine that a write or erase has been requested. Dur- 
ing a program cycle, the Write State Machine will 
control the program sequences and the CUI will only 
respond to status reads. During an erase cycle, the 
CUI will respond to status reads and erase suspend. 
After the Write State Machine has completed its 
task, it will allow the CUI to respond to its full com- 
mand set. The CUI will stay in the current command 
state until the microprocessor issues another com- 
mand. 


The CUI will successfully initiate an erase or write 
operation only when Vpp is within its voltage range. 
Depending upon the application, the system design- 
er may choose to make the Vpp power supply 
switchable, available only when memory updates 
are desired. The system designer can also choose 
to "hard-wire" Vpp to 12V. The 2-Mbit flash family is 
designed to accommodate either design practice. It 
is recommended that RP# be tied to logical Reset 
for data protection during unstable CPU reset func- 
tion as described in the "Product Family Overview" 
section. 


In the case of Boot Block modifications (write and 
erase), RP# is set to VHH = 12V typically, in addi- 
tion to Vpp at high voltage. However, if RP# is not at 
VHHwhen a program or erase operation of the boot 
block is attempted, the corresponding status register 
bit (Bit 4 for Program and Bit 5 for Erase, refer to 
Table 5 for Status Register Definitions) is set to indi- 
cate the failure to complete the operation. 


The Command User Interface (CUI) serves as the 
interface to the microprocessor. The CUI points the 
read/write path to the appropriate circuit block as 
described in the previous section. After the WSM 
has completed its task, it will set the WSM Status bit 
to a "1 ", which will also allow the CUI to respond to 
its full command set. Note that after the WSM has 
returned control to the CUI, the CUI will remain in its 
current state. 


Command 
Device Mode 
Codes 


00 
Invalid/Reserved 


10 
Alternate Program Setup 
20 
Erase Setup 
40 
Program Setup 
50 
Clear Status Register 


70 
Read Status Register 


90 
Intelligent Identifier 


BO 
Erase Suspend 


DO 
Erase Resume/Erase Confirm 
FF 
Read Array 


4.4.2.2 
Command 
Function 
Descriptions 


Device operations are selected by writing specific 
commands into the CUI. Table 4 defines the 2-Mbit 
flash family commands. 


Bus 
Notes 
First Bus Cycle 
Second 
Bus Cycle 
Command 
Cycles 
Req'd 
8 
Operation 
Address 
Data 
Operation 
Address 
Data 


Read Array 
1 
1 
Write 
X 
FFH 


Intelligent Identifier 
3 
2,4 
Write 
X 
90H 
Read 
IA 
liD 


Read Status Register 
2 
3 
Write 
X 
70H 
Read 
X 
SRD 


Clear Status Register 
1 
Write 
X 
50H 


Erase Setup/Erase Confirm 
2 
5 
Write 
BA 
20H 
Write 
BA 
DOH 


Word/Byte Write 
2 
6,7 
Write 
WA 
40H 
Write 
WA 
WD 
Setup/Write 


Erase Suspend/Erase Resume 
2 
Write 
X 
BOH 
Write 
X 
DOH 


Alternate Word/Byte Write 
2 
2,3,7 
Write 
WA 
10H 
Write 
WA 
WD 
Setup/Write 


NOTES: 
1. Bus operations 
are defined 
in Tables 
1, 2, 3. 
2. IA = Identifier 
Address: 
OOH for manufacturer 
code, 
01 H for device 
code. 
3. SRD = Data read from 
Status 
Register. 
4. liD = Intelligent 
Identifier 
Data. 
Following 
the Intelligent 
Identifier 
Command, 
two read operations 
access 
manufacturer 
and device 
codes . 


5. BA = Address 
within 
the block 
being erased. 
6. WA = Address 
to be written. 


WD = Data to be written 
at location 
WA. 


7. Either 40H or 10H commands 
is valid. 
8. When 
writing 
commands 
to the device, 
the upper 
data bus [D08-D015] 
= X (28F200BX-L-only) 
which 
is either 
Vcc 
or 
Vss to avoid 
burning 
additional 
current. 


These are unassigned commands. It is not recom- 
mended that the customer use any command other 
than the valid commands specified above. Intel re- 
serves the right to redefine these codes for future 
functions. 


Read Array (FFH) 


This single write command points the read path at 
the array. If the host CPU performs a CE#/OE# 
controlled read immediately following a two-write se- 
quence that started the WSM, then the device will 
output status register contents. If the Read Array 
command is given after Erase Setup the device is 
reset to read the array. A two Read Array command 
sequence (FFH) is required to reset to Read Array 
after Program Setup. 


After this command is executed, the CUI points the 
output path to the Intelligent Identifier circuits. Only 
Intelligent Identifier values at addresses 0 and 1 can 
be read (only address AO is used in this mode, all 
other address inputs are ignored). 


Read Status 
Register 
(70H) 


This is one of the two commands that is executable 
while the state machine is operating. After this com- 
mand is written, a read of the device will output the 
contents of the status register, regardless of the ad- 
dress presented to the device. 


The device automatically enters this mode after pro- 
gram or erase has completed. 


Clear Status 
Register 
(SOH) 


The WSM can only set the Program Status and 
Erase Status bits in the status register, it can not 
clear them. Two reasons exist for operating the 
status register in this fashion. The first is a synchro- 
nization. The WSM does not know when the host 
CPU has read the status register, therefore it would 
not know when to clear the status bits. Secondly, if 
the CPU is programming a string of bytes, it may be 
more efficient to query the status register after pro- 
gramming the string. Thus, if any errors exist while 
programming the string, the status register will return 
the accumulated error status. 


• 


This command simply sets the CUI into a state such 
that the next write will load the address and data 
registers. Either 40H or 10H can be used for Pro- 
gram Setup. Both commands are included to ac- 
commodate efforts to achieve an industry standard 
command code set. 


Program 


The second write after the program setup command, 
will latch addresses and data. Also, the CUI initiates 
the WSM to begin execution of the program algo- 
rithm. While the WSM finishes the algorithm, the de- 
vice will output Status Register contents. Note that 
the WSM cannot be suspended during program- 
ming. 


Prepares the CUI for the Erase Confirm command. 
No other action is taken. If the next command is not 
an Erase Confirm command then the CUI will set 
both the Program Status and Erase Status bits of the 
Status Register to a "1", place the device into the 
Read Status Register state, and wait for another 
command. 


If the previous command was an Erase Setup com- 
mand, then the CUI will enable the WSM to erase, at 
the same time closing the address and data latches, 
and respond only to the Read Status Register and 
Erase Suspend commands. While the WSM is exe- 
cuting, the device will output Status Register data 
when OE'" is toggled low. Status Register data can 
only be updated by toggling either OE'" or CE'" low. 


Erase Suspend 
(BOH) 


This command only has meaning while the WSM is 
executing an Erase operation, and therefore will only 
be responded to during an erase operation. After 
this command has been executed, the CUI will initi- 
ate the WSM to suspend Erase operations, and then 
return to responding to only Read Status Register or 
to the Erase Resume commands. Once the WSM 
has reached the Suspend state, it will set an output 
into the CUI which allows the CUI to respond to the 
Read Array, Read Status Register, and Erase Re- 
sume commands. In this mode, the CUI will not re- 
spond to any other commands. The WSM will also 


tinue to run, idling in the SUSPEND state, regardless 
of the state of all input control pins, with the exclu- 
sion of RP"'. RP'" low will immediately shut down 
the WSM and the remainder of the chip. 


Erase Resume 
(DOH) 


This command will cause the CUI to clear the Sus- 
pend state and set the WSM Status bit to a "0", but 
only if an Erase Suspend command was previously 
issued. Erase Resume will not have any effect in all 
other conditions. 


The 2-Mbit flash family contains a status register 
which may be read to determine when a program or 
erase operation is complete, and whether that oper- 
ation completed successfully. The status register 
may be read at any time by writing the Read Status 
command to the CUI. After writing this command, all 
subsequent Read operations output data from the 
status register until another command is written to 
the CUI. A Read Array command must be written to 
the CUI to return to the Read Array mode. 


The status register bits are output on 00[0:7] 
whether the device is in the byte-wide (x8) or word- 
wide (x16) mode for the 28F200BX-L. In the word- 
wide mode the upper byte, 00[8:15] 
is set to OOH 
during a Read Status command. In the byte-wide 
mode, 00[8:14] 
are tri-stated and 0015/A-1 
re- 
tains the low order address function. 


It should be noted that the contents of the status 
register are latched on the falling edge of OE'" or 
CE'" whichever occurs last in the read cycle. This 
prevents possible bus errors which might occur if the 
contents of the status register change while reading 
the status register. CE'" or OE'" must be toggled 
with each subsequent status read, or the completion 
of a program or erase operation will not be evident. 


The Status Register is the interface between the mi- 
croprocessor and the Write State Machine (WSM). 
When the WSM is active, this register will indicate 
the status of the WSM, and will also hold the bits 
indicating whether or not the WSM was successful in 
performing the desired operation. The WSM sets 
status bits "Three" through "Seven" and clears bits 
"Six" 
and "Seven", 
but cannot clear status bits 
"Three" 
through "Five". 
These bits can only be 
cleared by the controlling CPU through the use of 
the Clear Status Register command. 


4.4.3.1 
Status 
Register 
Bit Definition 


Table 5. Status Register 
Definitions 


SR.? = WRITE STATE MACHINE STATUS 
1 = Ready 
0= 
Busy 


SR.6 = ERASE SUSPEND STATUS 
1 = Erase Suspended 
o = Erase in Progress/Completed 


SR.5 = ERASE STATUS 


1 = Error in Block Erasure 
o = Successful Block Erase 


SR.4 = PROGRAM STATUS 
1 = Error in By1e/Word Program 
o = Successful By1e/Word Program 


SR.3 = Vpp STATUS 


1 = Vpp Low Detect; Operation Abort 
0= 
Vpp OK 


Write State Machine Status bit must first be checked to 
determine by1e/word program or block erase completion, 
before the Program or Erase Status bits are checked for 
success. 


When Erase Suspend is issued, WSM halts execution 
and sets both WSMS and ESS bits to "1". ESS bit re- 
mains set to "1" until an Erase Resume command is is- 
sued. 


When this bit is set to "1". WSM has applied the maxi- 
mum number of erase pulses to the block and is still un- 
able to successfully perform an erase verify. 


When this bit is set to "1", WSM has attempted but failed 
to Program a by1eor word. 


The Vpp Status bit unlike an AID converter, does not 
provide continuous indication of Vpp level. The WSM in- 
terrogates the Vpp level only after the by1ewrite or block 
erase command sequences have been entered and in- 
forms the system if Vpp has not been switched on. The 
Vpp Status bit is not guaranteed to report accurate feed- 
back between VPPLand VpPH. 


SR.2-SR.O = RESERVED FOR FUTURE ENHANCEMENTS 
These bits are reserved for future use and should be masked out when polling the Status Register. 


4.4.3.2 
Clearing 
the Status 
Register 


Certain 
bits in the status register 
are set by the write 
state machine, 
and can only be reset by the system 
software. 
These bits can indicate various failure con- 
ditions. 
By allowing 
the system 
software 
to control 
the resetting 
of these 
bits, several 
operations 
may 
be performed 
(such 
as cumulatively 
programming 
several 
bytes 
or 
erasing 
multiple 
blocks 
in 
se- 
quence). 
The 
status 
register 
may then 
be read to 
determine 
if an error occurred 
during that program- 
ming or erasure 
series. 
This 
adds 
flexibility 
to the 
way the device 
may be programmed 
or erased. 
To 
clear 
the status 
register, 
the Clear Status 
Register 
command 
is written to the CUI. Then, any other com- 
mand 
may be issued 
to the 
CUI. 
Note 
again 
that 
before 
a read cycle 
can be initiated, 
a Read Array 
command 
must 
be 
written 
to 
the 
CUI 
to 
specify 
whether 
the 
read 
data 
is to come 
from 
the 
array, 


status 
register, 
or Intelligent 
Identifier. 


Program 
is executed 
by a two-write 
sequence. 
The 
Program 
Setup 
command 
is written 
to the CUI fol- 


lowed by a second write which specifies 
the address 
and 
data 
to be programmed. 
The 
write 
state 
ma- 
chine 
will 
execute 
a sequence 
of internally 
timed 
events 
to; 


. 1. program 
the desired 
bits of the addressed 
memo- 
ry word (byte), and 


2. verify 
that 
the 
desired 
bits 
are 
sufficiently 
pro- 


grammed. 


Programming 
of the memory 
results 
in specific 
bits 


within a byte or word being changed 
to a "0". 


If the user attempts 
to program 
"l"s, 
there will be no 
change 
of the memory 
cell content 
and no error oc- 


curs. 


Similar to erasure, the status register indicates 
whether programming is complete. While the pro- 
gram sequence is executing, bit 7 of the status regis- 
ter is a "0". The status register can be polled by 
toggling either CE# or OE# to determine when the 
program sequence is complete. Only the Read 
Status Register command is valid while program- 
ming is active. 


When programming is complete, the status bits, 
which indicate whether the program operation was 
successful, should be checked. If the programming 
operation was unsuccessful, Bit 4 of the status regis- 
ter is set to a "1" to indicate a Program Failure. If 
Bit 3 is set then Vpp was not within acceptable limits, 
and the WSM will not execute the programming se- 
quence. 


The status register should be cleared before at- 
tempting the next operation. Any CUI instruction can 
follow after programming is completed; however, it 
must be recognized that reads from the memory, 
status register, or Intelligent Identifier cannot be ac- 
complished until the CUI is given the appropriate 
command. A Read Array command must first be giv- 
en before memory contents can be read. 


Figure 12 shows a system software flowchart for de- 
vice byte programming operation. Figure 13 shows a 
similar flowchart for device word programming oper- 
ation (28F200BX-L-only). 


Erasure of a single block is initiated by writing the 
Erase Setup and Erase Confirm commands to the 
CUI, along with the addresses, A[12:16] 
for the 
28F200BX-L or A[12:17] for the 28F002BX-L, identi- 
fying the block to be erased. These addresses are 
latched internally when the Erase Confirm command 
is issued. Block erasure results in all bits within the 
block being set to "1". 


The WSM will execute a sequence of internally 
timed events to: 
1. program all bits within the block 
2. verify that all bits within the block are sufficiently 
programmed 
. 


3. erase all bits within the block and 
4. verify that all bits within the block are sufficiently 
erased 


While the erase sequence is executing, Bit 7 of the 
status register is a "0". 


When the status register indicates that erasure is 
complete, the status bits, which indicate whether the 
erase operation was successful, should be checked. 


If the erasure operation was unsuccessful, Bit 5 of 
the status register is set to a "1" 
to indicate an 
Erase Failure. If Vpp was not within acceptable limits 
after the Erase Confirm command is issued, the 
WSM will not execute an erase sequence; instead, 
Bit 5 of the status register is set to a "1" to indicate 
an Erase Failure, and Bit 3 is set to a "1" to identify 
that Vpp supply voltage was not within acceptable 
limits. 


The status register should be cleared before at- 
tempting the next operation. Any CUI instruction can 
follow after erasure is completed; however, it must 
be recognized that reads from the memory array, 
status register, or Intelligent Identifier can not be ac- 
complished until the CUI is given the appropriate 
command. A Read Array command must first be giv- 
en before memory contents can be read. 


Figure 14 shows a system software flowchart for 
Block Erase operation. 


4.4.5.1 
Suspending 
and Resuming 
Erase 


Since an erase operation typically requires 2 to 5 
seconds to complete, an Erase Suspend command 
is provided. This allows erase-sequence interruption 
in order to read data from another block of the mem- 
ory. Once the erase sequence is started, writing the 
Erase Suspend command to the CUI requests that 
the Write State Machine (WSM) pause the erase se- 
quence at a predetermined point in the erase algo- 
rithm. The status register must be read to determine 
when the erase operation has been suspended. 


At this point, a Read Array command can be written 
to the CUI in order to read data from blocks other 
than that which is being suspended. The only other 
valid command at this time is the Erase Resume 
command or Read Status Register operation. 


Figure 15 shows a system software flowchart detail- 
ing the operation. 


During Erase Suspend mode, the chip can go into a 
pseudo-standby mode by taking CE# to VIHand the 
active current is now a maximum of 6 mA. If the chip 
is enabled while in this mode by taking CE# to VIL, 
the Erase Resume command can be issued to re- 
sume the erase operation. 


Upon completion of reads from any block other than 
the block being erased, the Erase Resume com- 
mand must be issued. When the Erase Resume 
command is given, the WSM will continue with the 
erase sequence and complete erasing the block. As 
with the end of erase, the status register must be 
read, cleared, and the next instruction issued in or- 
der to continue. 


Intel has designed extended cycling capability into 
its ETOX III flash memory technology. The 2-Mbit 
low voltage flash family is designed for 10,000 pro- 


gram/erase cycles on each of the five blocks. The 
combination of low electric fields, clean oxide pro- 
cessing and minimized oxide area per memory cell 
subjected to the tunneling electric field, results in 
very high cycling capability. 


Bus 
Command 
Comments 
Operation 


Write 
Setup 
Data = 40H 
Program 
Address = Byte to be 
programmed 


Write 
Program 
Data to be programmed 
Address = Byte to be 
programmed 


Read 
Status Register Data. 
Toggle OE# or CE# to update 
Status Register 


Standby 
Check SR.? 


1 = Ready, 0 = Busy 


Repeat for subsequent bytes. 


Full status check can be done after each byte or after a 
sequence of bytes. 


Write FFH after the last byte programming operation to 
reset the device to Read Array Mode. 


Bus 
Command 
Comments 
Operation 


Standby 
Check SR.3 
1 = Vpp Low Detect 


Standby 
Check SR.4 
1 = Byte Program Error 


SR.3 MUST be cleared, if set during a program attempt, 
before further attempts are allowed by the Write State 
Machine. 


SR.4 is only cleared by the Clear Status Register 
Command. in cases where multiple bytes are programmed 
before full status is checked. 


If error is detected, clear the Status Register before 
attempting retry or other error recovery. 


• 


Bus 
Commsnd 
Comments 
Operation 


Write 
Setup 
Data = 40H 


Program 
Address = Word to be 
programmed 


Write 
Program 
Data to be programmed 
Address = Word to be 
programmed 


Read 
Status Register Data. 


Toggle OE'" or CEll' to update 
Status Register 


Standby 
Check SR.? 


1 = Ready, 0 = Busy 


Repeat for subsequent words. 


Full status check can be done after each word or after a 
sequence of words. 


Write FFH after the last word programming operation to 
reset the device to Read Array Mode. 


Bus 
Command 
Comments 
Operation 


Standby 
Check SR.3 
1 = Vpp Low Detect 


Standby 
Check SR.4 


1 = Word Program Error 


SR.3 MUST be cleared, if set during a program attempt, 
before further attempts are allowed by the Write State 
Machine. 


SR.4 is only cleared by the Clear Status Register 
Command, in cases where multiple words are programmed 
before full status is checked. 


If error is detected, clear the Status Register before 
attempting retry or other error recovery. 


Bus 
Command 
Comments 
Operation 


Write 
Setup 
Data = 20H 
Erase 
Address = Within block to be 
erased 


Write 
Erase 
Data = DOH 


Address = Within block to be 
erased 


Read 
Status Register Data. 
Toggle OE# orCE# 
to update 


Status Register 


Standby 
Check SR.? 
1 = Ready,O = Busy 


Repeat for subsequent blocks. 


Full status check can be done after each block or after a 
sequence of blocks. 


Write FFH after the last block erase operation to reset the 
device to Read Array Mode. 


Bus 
Command 
Comments 
Operation 


Standby 
CheckSR.3 


1 = Vpp Low Detect 


Standby 
Check SR.4,5 


Both 1 = Command Sequence 
Error 


Standby 
CheckSR.5 
1 = Block Erase Error 


SR.3 MUST be cleared, if set during an erase attempt, 
before further attempts are allowed by the Write State 
Machine. 


SR.5 is only cleared by the Clear Status Register 
Command, in cases where multiple blocks are erased 
before full status is checked. 


If error is detected, clear the Status Register before 
attempting retry or other error recovery. 


• 


Figure 15. Erase Suspend/Resume 
Flowchart 


memorY array, PRC logic controls 
the device's 
pow- 
er consumption 
by entering 
the 
APS 
mode 
where 
typical 
lee current 
is 0.8 mA and maximum 
lee cur- 
rent is 2 mA. The device stays in this static state with 
outputs 
valid until a new memory 
location 
is read. 
With CE# 
at a logic-low 
level and RP# 
at a logic- 
high level, the device 
is placed 
in the active 
mode. 
The device 
lee current 
is a maximum 
of 22 mA at 
5 MHz. 


4.5.2 
AUTOMATIC 
POWER 
SAVINGS 


Automatic 
Power Savings 
(APS) is a low power fea- 
ture 
during 
active 
mode 
of operation. 
The 
2-Mbit 
flash 
family 
of products 
incorporate 
Power 
Reduc- 
tion 
Control 
(PRC) 
circuitry 
which 
basically 
allows 
the device to put itself into a low current 
state when 
it is not being accessed. 
After data is read from the 


Bus 
Command 
Comments 
Operation 


Write 
Erase 
Data = SOH 


Suspend 


Read 
Status Register Data. 
ToggleOE# 
orCE# 
to 
update Status Register 


Standby 
Check SR.7 


1 = Ready 


Standby 
Check SR.6 


1 = Suspended 


Write 
Read Array 
Data = FFH 


Read 
Read array data from block 
other than that being 
erased. 


Write 
Erase Resume 
Data = DOH 


4.5.3 
STANDBY 
POWER 


With CE# 
at a logic-high 
level (VIH), and the CUI in 
read mode, the memory 
is placed 
in standby 
mode 
where 
the maximum 
Ice standby 
current 
is 120 J.LA 
with CMOS input signals. The standby 
operation 
dis- 
ables much of the device's 
circuitry 
and substantially 
reduces 
device 
power 
consumption. 
The 
outputs 
(00[0:15] 
or 00[0:7]) 
are placed 
in a high-imped- 
ance 
state 
independent 
of the 
status 
of the OE # 
signal. 
When 
the 2-Mbit 
flash 
family 
is deselected 
during 
erase or program 
functions, 
the devices 
will 


intel~ 


continue to perform the erase or program function 
and consume program or erase active power until 
program or erase is completed. 


The 2-Mbit flash family supports a typical Ice of 
0.2 }JoAin deep power-down mode. One of the target 
markets for these devices is in portable equipment 
where the power consumption of the machine is of 
prime importance. The 2-Mbit flash family has a 
RP# pin which places the device in the deep power- 
down mode. When RP# 
is at a logic-low (GND 
± 0.2V), all circuits are turned off and the device typ- 
ically draws 0.2 }JoAof Vee current. 


During read modes, the RP# pin going low dese- 
lects the memory and places the output drivers in a 
high impedance state. Recovery from the deep pow- 
er-down state, requires a minimum of 700 ns to ac- 
cess valid data (tPHQV). 


During erase or program modes, RP# low will abort 
either erase or program operation. The contents of 
the memory are no longer valid as the data has been 
corrupted by the RP# function. As in the read mode 
above, all internal circuitry is turned off to achieve 
the 0.2 }JoAcurrent level. 


RP# transitions to VIL or turning power off to the 
device will clear the status register. 


The use of RP# during system reset is important 
with automated write/erase devices. When the sys- 
tem comes out of reset, it expects to read from the 
flash memory. Automated flash memories provide 
status information when accessed during write/ 
erase modes. If a CPU reset occurs with no flash 
memory reset, proper CPU initialization would not 
occur because the flash memory would be providing 
the status information instead of array data. Intel's 
Flash Memories allow proper CPU initialization fol- 
lowing a system reset through the use of RP# input. 
In this application, RP# is controlled by the same 
RESET# signal that resets the system CPU. 


The 2-Mbit flash family is designed to offer protec- 
tion against accidental block erasure or program- 
ming during power transitions. Upon power-up the 
2-Mbit flash family is indifferent as to which power 
supply, Vpp or Vee, powers-up first. Power supply 
sequencing is not required. 


The 2-Mbit flash family ensures the CUI is reset to 
the read mode on power-up. 


In addition, on power-up the user must either drop 
CE# low or present a new address to ensure valid 
data at the outputs. 


A system designer must guard against spurious 
writes for Vee voltages above VLKO when Vpp is 
active. Since both WE# and CE# must be low for a 
command write, driving either signal to VIHwill inhibit 
writes to the device. The CUI architecture provides 
an added level of protection since alteration of mem- 
ory contents can only occur after successful com- 
pletion of the two-step command sequences. Finally 
the device is disabled until RP# is brought to VIH, 
regardless of the state of its control inputs. This fea- 
ture provides yet another level of memory protec- 
tion. 


Flash memory's power switching characteristics re- 
quire careful device decoupling methods. System 
designers are interested in 3 supply current issues: 


• Standby current levels (Ices) 
• Active current levels (leeR) 
• Transient peaks produced by falling and rising 
edges of CE# . 


Transient current magnitudes depend on the device 
outputs' capacitive and inductive loading. Two-line 4 
control and proper decoupling capacitor selection 
will suppress these transient voltage peaks. Each 
flash device should have a 0.1 }JoFceramic capacitor 
connected between each Vee and GND, and be- 
tween its Vpp and GND. These high frequency, low- 
inherent inductance capacitors should be placed as 
close as possible to the package leads. 


4.7.1 Vpp TRACE ON PRINTED 
CIRCUIT 
BOARDS 


Writing to flash memories while they reside in the 
target system, requires special consideration of the 
Vpp power supply trace by the printed circuit board 
designer. The Vpp pin supplies the flash memory 
cell's current for programming and erasing. One 
should use similar trace widths and layout consider- 
ations given to the Vee power supply trace. Ade- 
quate Vpp supply traces and decoupling will de- 
crease spikes and overshoots. 


4.7.2 Vcc. Vpp AND RP# TRANSITIONS 


The CUI latches commands as issued by system 
software and is not altered by Vpp or CE# tran- 
sitions or WSM actions. Its state upon power-up, af- 
ter exit from deep power-down mode or after Vee 
transitions below VLKO (Lockout voltage), is Read 
Array mode. 


After any word/byte write or block erase operation is 
complete and even after Vpp transitions down to 
VPPL,the CUI must be reset to Read Array mode via 
the Read Array command when accesses to the 
flash memory are desired. 


I'IU Ilv~: 
I n1Soata sneet comalns 
preliminary Intor- 


mation on new products in production. The specifica- 
tions are subject to change without notice. Verify with 
your local Intel Sales office that you have the latest 
data sheet before finalizing a design. 


• WARNING: Stressing the device beyond the "Absolute 
Maximum 
Ratings" 
may 
cause 
permanent 
damage. 


These are stress ratings 
only. Operation 
beyond 
the 


"Operating 
Conditions" 
is not recommended 
and ex- 


tended 
exposure 
beyond 
the 
"Operating 
Conditions" 


may affect device reliability. 


Operating 
Temperature 
During Read 
O·C to 70·C(1) 


During Block 
Erase and 


Word/Byte 
Write 
O·C to 70·C 


Temperature 
Under Bias 
-10·C 
to + BO·C 


Storage Temperature 
- 65·C to + 125·C 


Voltage 
on Any Pin 
(except 
Vcc. 
VPP. Ag and RP#) 
with Respect 
to GND 
- 2.0V to + 7.0V(2) 


Voltage 
on Pin RP# 
or Pin Ag 


with Respect 
to GND 
- 2.0V to 13.5V(2. 3) 


Vpp Program 
Voltage 
with Respect 
to GND during Block 
Erase 


and Word/Byte 
Write 
..... 
- 2.0V to + 14.0V(2. 3) 


Vcc 
Supply Voltage 
with Respect 
to GND 
- 2.0V to + 7.0V(2) 


Output Short Circuit Current 
100 mA(4) 


NOTES: 
1. Operating temperature is for commercial product defined by this specification. 
2. Minimum DC voltage is -0.5V 
on input/output pins. During transitions. this level may undershoot to -2.0V 
for periods 


<20 ns. Maximum DC voltage on input/output pins is Vcc + 0.5V which, during transitions, may overshoot to Vcc + 2.0V 
for periods <20 ns. 
3. Maximum DC voltage on Vpp may overshoot to + 14.0V for periods <20 ns. Maximum DC voltage on RP# or Ag may 
overshoot to 13.5V for periods < 20 ns. 
4. Output shorted for no more than one second. No more than one output shorted at a time. 
5. AC Specifications are valid at both voltage ranges. See DC Characteristics table for voltage range-specific specifications. 


Symbol 
Parameter 
Notes 
Mln 
Max 
Unit 


TA 
Operating 
Temperature 
0 
70 
·C 


Vcc 
Vcc Supply Voltage 
5 
3.00 
3.60 
V 


Vcc 
Vcc Supply Voltage 
5 
4.50 
5.50 
V 


Symbol 
Parameter 
Notes 
Mln 
Typ 
Max 
Unit 
Test Condition 


III 
Input Load Current 
1 
±1.0 
JJ-A 
Vcc = VccMax 
VIN = Vcc or GND 


ILO 
Output Leakage Current 
1 
±10 
JJ-A 
Vcc = VccMax 
VOUT = Vcc or GND 


Iccs 
Vcc Standby 
Current 
1.3 
45 
120 
JJ-A 
Vcc = VccMax 
CE# = RP# = Vcc 
±0.2V 


45 
120 
JJ-A 
Vcc = VccMax 
CE# = RP# = VIH 


ICCD 
Vcc Deep Power-down 
Current 
1 
0.20 
1.2 
JJ-A 
RP# = GND ±0.2V 


Symbol 
Parameter 
Notes 
Mln 
Typ 
Max 
Unit 
Test Condition 


leeR 
Vee Read Current for 
1,5, 
15 
25 
mA 
Vcc = Vee Max, CE# = GND 


28F200BX-L 
Word-Wide 
and 
6 
f = 5 MHz, lOUT = 0 mA 


Byte-Wide 
Mode and 
CMOS Inputs 
28F002BX-L 
Byte-Wide 
Mode 
15 
25 
mA 
Vee = Vee Max, CE# 
= VIL 


f = 5 MHz, lOUT = 0 mA 
TIL 
Inputs 


leew 
Vee Word/Byte 
Write Current 
1,4 
30 
mA 
Word/Byte 
Write in Progress 


IeeE 
Vee Block Erase Current 
1,4 
20 
mA 
Block Erase in Progress 


leeES 
Vee Erase Suspend 
Current 
1,2 
3 
6 
mA 
Block Erase Suspended, 


CE# = VIH 


IpPS 
Vpp Standby Current 
1 
±15 
J.LA 
Vpp ~ Vee 


Ippo 
Vpp Deep Power-down 
Current 
1 
5.0 
J.LA 
RP# = GND ±0.2V 


IpPR 
Vpp Read Current 
1 
200 
J.LA 
Vpp> 
Vee 


Ippw 
Vpp Word Write Current 
1 
40 
mA 
Vpp = VPPH 
Word Write in Progress 


Ippw 
Vpp Byte Write Current 
1 
30 
mA 
Vpp = VPPH 
Byte Write in Progress 


IpPE 
Vpp Block Erase Current 
1 
30 
mA 
Vpp = VPPH 
Block Erase in Progress 


IpPES 
Vpp Erase Suspend 
Current 
1 
200 
J.LA 
Vpp = VPPH 
Block Erase Suspended 


IRP# 
RP# 
Boot Block Unlock Current 
1,4 
500 
J.LA 
RP# = VHH 


110 
Ag Intelligent 
Identifier 
Current 
1,4 
500 
J.LA 
Ag = VIO 


VIO 
Ag Intelligent 
Identifier Voltage 
11.4 
12.0 
13.0 
V 


VIL 
Input Low Voltage 
-0.5 
0.6 
V 


VIH 
Input High Voltage 
2.0 
Vee+0.5 
V 


VOL 
Output Low Voltage 
0.4 
V 
Vee = VeeMin 
IOL = 2 mA 


VOH 
Output High Voltage 
2.4 
V 
Vcc = VeeMin 
IOH = -2mA 


VPPL 
Vpp during Normal Operations 
3 
0.0 
4.1 
V 


VPPH 
Vpp during Erase/Write 
11.4 
12.0 
12.6 
V 
Operations 


VLKO 
Vee Erase/Write 
Lock Voltage 
2.0 
V 


VHH 
RP# 
Unlock Voltage 
11.4 
12.0 
13.0 
V 
Boot Block Write/Erase 


intel~ 


Symbol 
Parameter 
Typ 
Max 
Unit 
Condition 


CIN 
Input Capacitance 
6 
8 
pF 
VIN = OV 


COUT 
Output Capacitance 
10 
12 
pF 
VOUT = OV 


NOTES: 
1. All currents are in RMS unless otherwise noted. Typical values at Vcc = 3.3V, VPP = 12.0V, T = 25'C. These currents 
are valid for all product versions (packages and speeds). 
2. ICCESis specified with the device deselected. If the device is read while in Erase Suspend Mode, current draw is the sum 
of ICCESand ICCR. 
3. Block Erases and Word/Byte Writes are inhibited when VPP = VPPLand not guaranteed in the range between VPPHand 
VPPL· 
4. Sampled, not 100% tested. 
5. Automatic Power Savings (APS) reduces ICCRto less than 2 mA in static operation. 
6. CMOS Inputs are either VCC ±0.2V or GND ±0.2V. TTL Inputs are either VIL or VIH. 


Symbol 
Parameter 
Notes 
Mln 
Typ 
Max 
Unit 
Test Condition 


III 
Input Load Current 
1 
±1.0 
p.A 
Vcc = VccMax 
VIN = Vcc or GND 


ILO 
Output Leakage Current 
1 
±10 
p.A 
Vcc = VccMax 
VOUT = VccorGND 


Iccs 
Vcc Standby Current 
1.5 
mA 
Vcc = VccMax 
CE# = RP# = VIH 


100 
p.A 
Vee = VeeMax 
CE# = RP# = Vec 
±0.2V 


ICCD 
Vec Deep Power-down 
1 
1.2 
p.A 
RP# = GND ±0.2V 


Current 


lecR 
Vee Read Current for 
1 
40 
mA 
Vee = Vce Max, CE# 
= GND 


28F200BX-L 
Word-Wide 
and 
f = 5 MHz, lOUT = 0 mA 


Byte-Wide 
Mode and 
CMOS Inputs 


28F002BX-L 
Byte-Wide 
40 
mA 
Vee = Vee Max, CE# = VIL 
Mode 


f = 5 MHz, lOUT = 0 mA 
TTL Inputs 


Icew 
Vec Word-Byte 
Write Current 
1 
70 
mA 
Word or Byte Write in Progress 


lecE 
Vec Block Erase Current 
1 
30 
mA 
Block Erase in Progress 


leeES 
Vec Erase Suspend 
Current 
1,2 
10 
mA 
Block Erase Suspended, 
CE# = VIH 


Ipps 
Vpp Standby 
Current 
1 
±15 
p.A 
Vpp s Vec 


IpPD 
Vpp Deep Power-down 
1 
5.0 
p.A 
RP# = GND ±0.2V 


Current 


intel~ 


Symbol 
Parameter 
Notes 
Min 
Typ 
Max 
Unit 
Test Condition 


IpPR 
Vpp Read Current 
1 
200 
/LA 
Vpp> 
Vcc 


Ippw 
Vpp Word Write Current 
1 
40 
mA 
Vpp = VPPH 
Word Write in Progress 


Ippw 
Vpp Byte Write Current 
1 
30 
mA 
Vpp = VpPH 
Byte Write in Progress 


IpPE 
Vpp Block Erase Current 
1 
30 
mA 
Vpp = VPPH 
Block Erase in Progress 


IpPES 
Vpp Erase Suspend 
Current 
1 
200 
/LA 
Vpp = VPPH 
Block Erase Suspended 


IRP'" 
RP# 
Boot Block Unlock Current 
1,4 
500 
/LA 
RP# = VHH 


110 
Ag Intelligent 
Identifier Current 
1,4 
500 
/LA 
Ag = VIO 


VIO 
Ag Intelligent 
Identifier Voltage 
11.4 
12.0 
13.0 
V 


VIL 
Input Low Voltage 
-0.5 
0.8 
V 


VIH 
Input High Voltage 
2.0 
Vcc+0.5 
V 


VOL 
Output 
Low Voltage 
0.45 
V 
Vcc = VccMin 
IOL = 5.8mA 


VOH 
Output High Voltage 
2.4 
V 
Vcc = VccMin 
IOH = -2.5 
mA 


VPPL 
Vpp during Normal Operations 
3 
0.0 
6.5 
V 


VPPH 
Vpp during Erase/Write 
11.4 
12.0 
12.6 
V 
Operations 


VLKO 
Vcc Erase/Write 
Lock Voltage 
2.2 
V 


VHH 
RP# 
Unlock Voltage 
11.4 
12.0 
13.0 
V 
Boot Block Write/Erase 


NOTES: 
1. All currents 
are in RMS unless 
otherwise 
noted. 
Typical 
values 
at Vcc 
= 5.0V. Vpp = 12.0V, T = 25"C. These 
currents 
are valid for all product 
versions 
(packages 
and speeds). 
2. leeEs 
is specified 
with the device 
deselected. 
If the device 
is read while in Erase Suspend 
Mode, 
current 
draw is the sum 
of leeES and ICCR· 
3. Block 
Erase/Byte 
Writes 
are inhibited 
when 
Vpp = VPPL and not guaranteed 
in the range 
between 
VPPH and VPPL. 
4. All parameters 
are sampled, 
not 100% 
tested. 


3.0 
1.5INPUTX_TEST;7INTS--X1.5 
OUTPUT 
0.0 
290449-15 
AC test 
inputs 
are driven 
at 3.0V for a Logic 
"1" 
and O.OV for a logic 
"0". 
Input timing 
begins, 
and output 
timing 
ends, at 1.5V. Input rise and fall times 
(10% 
to 90%) < 10 ns. 


DEVICE 


UNDER 


TEST 


CL = 50 pF 
CL Includes 
Jig Capacitance 
RL = 3.3 Kfl 


Versions 
28F200BX-L 
150 
28F002BX-L 
150 
Unit 


Symbol 
Parameter 
Notes 
Mln 
Max 


tAVAV 
tRC 
Read Cycle Time 
150 
ns 


tAVQV 
tACC 
Address 
to Output Delay 
150 
ns 


tELQV 
teE 
CE'" 
to Output Delay 
2 
150 
ns 


tpHQV 
tpWH 
RP", High to Output Delay 
600 
ns 


tGLQV 
tOE 
OE'" 
to Output Delay 
2 
65 
ns 


tELQX 
tLZ 
CE'" 
to Output Low Z 
3 
0 
ns 


tEHQZ 
tHZ 
CE'" 
High to Output High Z 
3 
55 
ns 


tQLQX 
taLZ 
OE'" 
to Output Low Z 
3 
0 
ns 


tGHQZ 
tDF 
OE'" 
High to Output High Z 
3 
45 
ns 


taH 
Output Hold from Addresses, 
3 
0 
ns 
CE'" 
or OE '" Change, 
Whichever 
is First 


tELFL 
CE'" 
to BYTE", 
Switching 
3 
5 
ns 


tELFH 
Low to High 


tFHQV 
BYTE", 
Switching 
High 
3,4 
150 
ns 
to Valid Output Delay 


tFLQZ 
BYTE'" 
Switching 
Low 
3 
45 
ns 
to Output High Z 


NOTES: 
1. See AC Input/Output Reference Waveform for timing measurements. 
2. OE'" may be delayed up to teE-toE after the falling edge of CE'" without impact on teE. 
3. Sampled. not 100% tested. 
4. tFLav. BYTE'" switching low to valid output delay will be equal to tAvav. measured from the time DQ1S/A-1 becomes 
valid. 


_. 


'@ 
DEVICE AND 
:J 
~ 
Vec 
POWER-UP 
STANDBY 
ADDRESS SELECTION 
OUTPUTS ENABLED 
DATA VALID 
STANDBY 
Vcc PCWER-DDWN 
c[ 
liiiil 
V,H 
--- 
IF' 


ADDRESSES (A) 
= 
ADDRESSES STABLE 
Ii9 
~= 
V,L 
--- 
~ 
tAVAV 
~ 
~ 
V,H 
~ 
CE- 
(E) 


." 
V,L 
- -- 
ca·e:~ 
CD 
V,H 
..•. 
!",. 
DE- 
(G) 


0 
V,L 
- -- 


== 
DI< 
CD- 


V,H 
0~3 
WE- 
(W) 
III- 


V,L 
0~ 
%I 
toH 
CD 
DI 
V,H 
C. 
0 
HIGH Z 
HIGH Z 
N 
C» 
~ 
DATA (0/0) 
VALID OUTPUT 
"TI 
CD 
I. 


N 
~ 
V,L 
! 
00 
0 
tAVOV 
m 
::l 
>< 
III 
I 


S.OV 
-tr- 


Vcc 
...•.. 
m 


GND 
.r 


"'('l .,.) 


lpHoV 


" 
N 
C» 
"TI 


"-- 


00 
Nm 
><. 
V,L 
-t 
! 


290449-17 
r- 
...•.. 


j 
m 
r- 


intelQP 


V,H 


ADDRESSES 
(A) 


V'L 


V,H 


CE- 
(C) 


V'L 


V,H 


DE- 
(e) 


V'L 


V,H 


BYTE- 
(n 


v" 


V,H 


HIGH Z 


DATA (000-00,) 


V'L 


DATA (00,,-00,.) 


DATA 
OUTPUT 
ON DQD-D~ 


Versions(4) 
28F200BX·L 
150 
28F002BX-L 
150 
Unit 


Symbol 
Parameter 
Notes 
Min 
Max 


tAVAV 
twc 
Write Cycle Time 
150 
ns 


tpHWL 
tps 
RP # High Recovery 
to WE # Going Low 
1 
/Ls 


tELWL 
tes 
CE # Setup to WE # Going Low 
0 
ns 


tpHHWH 
tpHS 
RP# 
VHH Setup to WE# 
Going High 
6,8 
200 
ns 


tVPWH 
tvps 
Vpp Setup to WE# 
Going High 
5,8 
200 
ns 


tAVWH 
tAS 
Address 
Setup to WE # Going High 
3 
95 
ns 


tDVWH 
tDS 
Data Setup to WE # Going High 
4 
100 
ns 


tWLWH 
twP 
WE # Pulse Width 
100 
ns 


tWHDX 
tDH 
Data Hold from WE # High 
4 
0 
ns 


tWHAX 
tAH 
Address 
Hold from WE # High 
3 
10 
ns 


tWHEH 
teH 
CE # Hold from WE # High 
10 
ns 


tWHWL 
tWPH 
WE # Pulse Width High 
50 
ns 


tWHOV1 
Duration of Programming 
Operation 
(Boot) 
2,5,6 
6 
/Ls 


tWHOV2 
Duration of Word/Byte 
2,5,6 
0.3 
s 
Programming 
Operation 


tWHOV3 
Duration 
of Erase Operation 
2,5,6 
0.3 
s 
(Parameter) 


tWHOV4 
Duration, of Erase Operation 
(Main) 
2,5,6 
0.6 
s 


tOWL 
tVPH 
Vpp Hold from Valid SRD 
5,8 
0 
ns 


taVPH 
tpHH 
RP# 
VHH Hold from Valid SRD 
6,8 
0 
ns 


tpHBR 
Boot-Block 
l;Ielock Delay 
7,8 
200 
ns 


NOTES: 
1. Read timing characteristics during write and erase operations are the same as during read-only operations. Refer to AC 
characteristics during Read Mode. 
2. The on-chip WSM completely automates program/erase operations; program/erase algorithms are now controlled inter- 
nally which includes verify and margining operations. 
3. Refer to command definition table for valid AIN' 
4. Refer to command definition table for valid DIN. 
5. Program/Erase durations are measured to valid SRD data (successful operation, SR.7= 1). 
6. For Boot Block Program/Erase, RPiI' should be held at VHH until operation completes successfully. 
7. Time tpHBRis required for successful relocking of the Boot Block. 
8. Sampled but not 100% tested. 
• 


28F200BX-L 
150 


Parameter 
Notes 
28F002BX-L 
150 
Unit 


Mln 
Typ(1) 
Max 


Boot/Parameter 
Block Erase Time 
2 
2.0 
8.6 
s 


Main Block Erase Time 
2 
3.4 
17.0 
s 


Main Block Byte Program Time 
2 
1.4 
5.3 
s 


Main Block Word Program Time 
2 
0.7 
2.7 
s 


NOTES: 
1. 25"C, 
12.QV Vpp. 


2. Excludes 
System-Level 
Overhead. 
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WRITE 


WRITE 
PROGRAM 
OR 
VALID 
ADDRESS 
.t DATA (PROGRAM) 
AUTOMATED 
PROGRAM 


ERASE 
SETUP 
COMMAND 
OR ERASE 
CONfIRM 
COMMAND 
OR ERASE 
DELAY 
--€: 


AC CHARACTERISTICS 
FOR CE#-CONTROLLED 
WRITE 
OPERATIONS 


vcc 
= 3.3V 
±0.3V, 
5.0V 
±10% 


Versions 
28F200BX·L 
150 
28F002BX-L 
150 
Unit 


Symbol 
Parameter 
Notes 
Min 
Max 


tAVAV 
twc 
Write Cycle Time 
150 
ns 


tpHEL 
tps 
RP# 
High Recovery 
to CE# 
Going Low 
1 
/los 


tWLEL 
tws 
WE # Setup to CE # Going Low 
0 
ns 


tpHHEH 
tpHS 
RP# 
VHH Setup to CE# 
Going High 
6,8 
200 
ns 


tVPEH 
tvps 
VPP Setup to CE# 
Going High 
5,8 
200 
ns 


tAVEH 
tAS 
Address 
Setup to CE # Going High 
3 
95 
ns 


tOVEH 
tos 
Data Setup to CE # Going High 
4 
100 
ns 


tELEH 
tcp 
CE # Pulse Width 
100 
ns 


tEHOX 
tOH 
Data Hold from CE # High 
4 
0 
ns 


tEHAX 
tAH 
Address 
Hold from CE # High 
3 
10 
ns 


tEHWH 
tWH 
WE # Hold from CE # High 
10 
ns 


tEHEL 
tCPH 
CE # Pulse Width High 
50 
ns 


tEHOV1 
Duration of Word/Byte 
Programming 
2,5,6 
6 
/los 
Operation 
(Boot) 


tEHOV2 
Duration of Erase Operation 
(Boot) 
2,5,6 
0.3 
s 


tEHOV3 
Duration of Erase Operation 
(Parameter) 
2,5,6 
0.3 
s 


tEHOV4 
Duration of Erase Operation 
(Main) 
2,5,6 
0.6 
s 


taWL 
tVPH 
VPP Hold from Valid SRD 
5,8 
0 
ns 


taVPH 
tpPH 
RP# 
VHH Hold from Valid SRD 
6,8 
0 
ns 


tpHBR 
Boot-Block 
Relock Delay 
7 
200 
ns 


NOTES: 
1. Chip-Enable Controlled Writes: Write operations are driven by the valid combination of CE# and WE# in systems where 
CE# defines the write pulse-width (within a longer WE# timing waveform), all set-up, hold and inactive WE# time should be 
measured relative to the CE# waveforms. 
2,3,4,5,6,7,8: 
Refer to AC characteristics for WE#-controlled write operations. 
9. Read timing characteristics during write and erase operations are the same as during read-only operations. Refer to AC 
characteristics during read mode. 
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WRITE 


WRITE PROGRAM OR 
VALID 
ADDRESS 
&: DATA (PROGRAM) 
AUTOMATED 
PROGRAM 


ERASE 
SETUP 
COMMAND 
OR ERASE 
CONFIRM 
COMMAND 
OR ERASE 
DELAY 


If:~H~ 
--------------------- 


--€: 


LT 


PACKAGE 


E 
= 
STANDARD 
56 
LEAD 
TSOP 


PA = 44 
LEAD 
PSOP 


~ 
ACCESS 
SPEED 
(ns) 


150 ns 


VALID 
COMBINATIONS: 
E28F200BX-L150 
PA28F200BX-L150 


VALID 
COMBINATIONS: 
E28F002BX-L 
150 


Additional 
Information 
28F200BX/28F002BX 
Datasheet 
28F400BX/28F004BX 
Datasheet 
28F400BXL/28F004BXL 
Datasheet 


Order Number 
290448 
290451 
290450 


AP-363 "Extended 
Flash BIOS Design for Portable 
Computers" 


AP-357 "Power 
Supply Solutions 
for Flash Memory" 
ER-28 "ETOX-1I1 Flash Memory Technology" 
ER-29 "The 
Intel 2/4 Mbit Boot Block Flash Memory 
Family" 


292098 
292092 
294012 
294013 


Number 
Description 


-001 
Original Version 


-002 
Modified 
BYTE # AC Timings 
Modified tDVWH parameter 
for AC Characteristics 
for Write Operations 


-003 
PWD renamed to RP# 
for JEDEC standardization 
compatibility. 
Combined 
Vcc Read Current for 28F200BX-L 
Word-Wide 
and Byte-Wide 
Mode and 


28F002BX-L 
Byte-Wide 
Mode in DC Characteristics 
tables. 
Changed 
Ipps current spec from ± 10 IJ-Ato ± 15 IJ-Ain DC Characteristics 
table. 


Added Boot Block Unlock current spec in DC Characteristics 
tables. 


Improved 
tpWH spec to 600 ns (was 700 ns) 
Changed 
ICCRcurrent spec from 20 mA maximum to 25 mA maximum 
and added typical spec 


to DC Characteristics 
table. 


28F001 BX-T128F001 BX-B 


1M (128K x 8) CMOS FLASH MEMORY 


• High Integration 
Blocked 
Architecture 
• High-Performance 
Read 


-One 
8 KB Boot Block w/Lock 
Out 
- 
120 ns Maximum 
Access Time 
- 
Two 4 KB Parameter 
Blocks 
- 
5.0V ± 10% Vee 


- 
One 112 KB Main Block 
• Hardware 
Data Protection 
Feature 
• 100,000 Erase/Program 
Cycles Per 
- 
Erase/Write 
Lockout 
during Power 
Block 
Transitions 


• Simplified 
Program 
and Erase 
• Advanced 
Packaging, 
JEDEC Pinouts 
- 
Automated 
Algorithms 
via On-Chip 
- 
32-Pin PDIP 


Write State Machine 
(WSM) 
- 
32-Lead 
PLCC, TSOP 


• SRAM-Compatible 
Write Interface 
• ETOX" 
Nonvolatile 
Flash Technology 
• Deep-Powerdown 
Mode 
- 
EPROM-Compatible 
Process 
Base 


- 
0.05 ,...AIce Typical 
- 
High-Volume 
Manufacturing 


- 
0.8 ,...AIpp Typical 
Experience 


• 12.0V ± 5% Vpp 
• Extended 
Temperature 
Options 


Intel's 
28F001 BX-B and 28F001 BX-T combine 
the cost-effectiveness 
of Intel standard 
flash 
memory 
with 
features 
that simplify 
write and allow block erase. These 
devices 
aid the system 
designer 
by combining 
the 
functions 
of several 
components 
into one, making 
boot block flash an innovative 
alternative 
to EPROM 
and 
EEPROM 
or 
battery-backed 
static 
RAM. 
Many 
new 
and 
existing 
designs 
can 
take 
advantage 
of 
the 
28F001 BX's integration 
of blocked 
architecture, 
automated 
electrical 
reprogramming, 
and standard 
processor 
interface. 


The 28F001BX-B 
and 28F001BX-T 
are 1,048,576 
bit nonvolatile 
memories 
organized 
as 131,072 
bytes 
of 
8 bits. They are offered 
in 32-pin 
plastic 
DIP, 32-lead 
PLCC and 32-lead 
TSOP 
packages. 
Pin assignment 
conform 
to JEDEC 
standards 
for byte-wide 
EPROMs. 
These 
devices 
use an integrated 
command 
port and 
state 
machine 
for simplified 
block erasure 
and byte reprogramming. 
The 28F001 BX- T's block locations 
pro- 
vide 
compatibility 
with 
microprocessors 
and 
microcontrollers 
that 
boot 
from 
high memory, 
such 
as Intel's 
MCS-186 
family, 80286, 
i386™, 
i486™, 
i860™ 
and 80960CA. 
With exactly the same memory 
segmentation, 
the 28F001 BX-B memory map is tailored 
for microprocessors 
and microcontrollers 
that boot from low memory, 
such as Intel's MCS-51, 
MCS-196, 
80960KX 
and 80960SX 
families. 
All other features 
are identical, 
and unless 
otherwise 
noted, the term 28F001 BX can refer to either device 
throughout 
the remainder 
of this document. 


The 
boot 
block 
section 
includes 
a reprogramming 
write 
lock 
out feature 
to guarantee 
data 
integrity. 
It is 
designed 
to contain 
secure 
code which 
will bring up the system 
minimally 
and download 
code to the other 
locations 
of the 28F001 BX. Intel's 
28F001 BX employs 
advanced 
CMOS circuitry 
for systems 
requiring 
high- 
performance 
access 
speeds, 
low power consumption, 
and immunity 
to noise. Its 120 ns access time provides 
no-WAlT-state 
performance 
for a wide range 
of microprocessors 
and microcontrollers. 
A deep-powerdown 
mode lowers power consumption 
to 0.25 JJ-Wtypical through 
Vcc, crucial in laptop computer, 
handheld 
instru- 
mentation 
and other low-power 
applications. 
The RP# 
power control 
input also provides 
absolute 
data protec- 
tion during system 
powerup 
or power 
loss. 


Manufactured 
on Intel's ETOX process 
base, the 28F001 BX builds on years of EPROM experience 
to yield the 
highest 
levels of quality, 
reliability, 
and cost-effectiveness. 
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Figure 1. 28F001BX 
Block Diagram 


Table 1. Pin Description 


Symbol 
Type 
Name and Function 


Ao-A16 
INPUT 
ADDRESS 
INPUTS for memory addresses. 
Addresses 
are internally 
latched during 


a write cycle. 


000-00] 
INPUT/ 
DATA INPUTS/OUTPUTS: 
Inputs data and commands 
during memory write 
OUTPUT 
cycles; outputs 
data during memory, Status Register 
and Identifier 
read cycles. The 


data pins are active high and float to tri-state 
off when the chip is deselected 
or the 


outputs 
are disabled. 
Data is internally 
latched during a write cycle. 


CE# 
INPUT 
CHIP ENABLE: Activates 
the device's 
control 
logic, input buffers, decoders 
and 


sense amplifiers. 
CE # is active low; CE # high deselects 
the memory device and 


reduces power consumption 
to standby 
levels. 


RP# 
INPUT 
POWER DOWN: Puts the device in deep powerdown 
mode. RP# 
is active low; 


RP # high gates normal operation. 
RP # = VHH allows programming 
of the boot 


block. RP # also locks out erase or write operations 
when active low, providing 
data 


protection 
during power transitions. 
RP# 
active resets internal automation. 
Exit 
from deep powerdown 
sets device to Read Array mode. 


OE# 
INPUT 
OUTPUT 
ENABLE: Gates the device's 
outputs through the data buffers during a 
read cycle. OE # is active low. OE # = VHH (pulsed) allows programming 
of the 
boot block. 


WE# 
INPUT 
WRITE 
ENABLE: Controls 
writes to the Command 
Register and array blocks. WE # 


is active low. Addresses 
and data are latched on the rising edge of the WE # pulse. 


Vpp 
ERASE/PROGRAM 
POWER SUPPLY for erasing blocks of the array or 


programming 
bytes of each block. Note: With Vpp < VPPL max, memory contents 
cannot 
be altered. 


Vcc 
DEVICE 
POWER SUPPLY: (5V ±10%) 


GND 
GROUND 
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Figure 2. DIP Pin Configuration 
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The 28F001BX flash 'boot block' memory augments 
the non-volatility, in-system electrical erasure and 
reprogrammability of Intel's standard flash memory 
by offering four separately erasable blocks and inte- 
grating a state machine to control erase and pro- 
gram functions. The specialized blocking architec- 
ture and automated programming of the 28F001BX 
provide a full·function, non-volatile flash memory 
ideal for a wide range of applications, including PC 
boot/BIOS memory, minimum-chip embedded pro- 
gram memory and parametric data storage. The 
28F001BX combines the safety of a hardware-pro- 
tected 8-KByte boot block with the flexibility of three 
separately reprogrammable blocks (two 4-KByte pa- 
rameter blocks and one 112-KByte code block) into 
one versatile, cost-effective flash memory. Addition- 
ally, reprogramming one block does not affect code 
stored in another block, ensuring data integrity. 


The 
flexibility 
of 
flash 
memory 
reduces 
costs 


throughout the life cycle of a design. During the early 
stages of a system's life, flash memory reduces pro- 
totype development and testing time, allowing the 
system designer to modify in-system software elec- 
trically versus manual removal of components. Dur- 
ing production, flash memory provides flexible firm- 
ware for just-in-time configuration, reducing system 
inventory and eliminating unnecessary handling and 
less reliable socketed connections. Late in the life 
cycle, when software updates or code "bugs" are 
often unpredictable and costly, flash memory reduc- 
es update costs by allowing the manufacturers to 
send floppy updates versus a technician. Alterna- 
tively, remote updates over a communication link are 
possible at speeds up to 9600 baud due to flash 
memory's fast programming time. 


sonal 
computer, 
are 
ideal applications 
for 
the 
28F001BX. The internal state machine provides 
SRAM-like timings for program and erasure, using 
the Command and Status Registers. The blocking 
scheme allows BIOS update in the main and param- 
eter blocks, while still providing recovery code in the 
boot block in the unlikely event a power failure oc- 
curs during an update, or where BIOS code is cor- 
rupted. Parameter blocks also provide convenient 
configuration storage, backing up SRAM and battery 
configurations. 
EISA systems, for example, can 
store hardware configurations in a flash parameter 
block, reducing system SRAM. 


Laptop BlOSs are becoming increasingly complex 
with the addition of power management software 
and extended system setup screens. BIOS code 
complexity increases the potential for code updates 
after the sale, but the compactness of laptop de- 
signs makes hardware updates very costly. Boot 
block flash memory provides an inexpensive update 
solution for laptops, while reducing laptop obsoles- 
cence. For portable PCs and hand-held equipment, 
the deep powerdown mode dramatically lowers sys- 
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The 28F001BX gives the embedded system design- 
er several desired features. The internal state ma- 
chine reduces the size of external code dedicated to 
the erase and program algorithms, as well as freeing 
the microcontroller or microprocessor to respond to 
other system requests during program and erasure. 
The four blocks allow logical segmentation of the 
entire embedded software: the 8-KBy1eblock for the 
boot code, the 112-KBy1e block for the main pro- 
gram code and the two 4-KBy1eblocks for updatable 
parametric data storage, diagnostic messages and 
data, or extensions of either the boot code or pro- 
gram code. The boot block is hardware protected 
against unauthorized write or erase of its vital code 
in the field. Further, the powerdown mode also locks 
out erase or write operations, providing absolute 
data protection during system powerup or power 
loss. This hardware protection provides obvious ad- 
vantages for safety related applications such as 
transportation, military, and medical. The 28F001BX 
is well suited for minimum-chip embedded applica- 
tions ranging from communications to automotive. 


PORT 
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SYSTEM 
RESET 
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The 28F001BX introduces on-chip write automation 
to manage write and erase functions. The write state 
machine allows for: 100% TTL-Ievel control inputs; 
fixed power supplies during erasure and program- 
ming; minimal processor overhead with RAM-like 
write timings, and maximum EPROM compatiblity. 


After initial device powerup, or after return from 
deep powerdown mode (see Bus Operations), the 
28F001BX functions as a read-only memory. Manip- 
ulation of external memory-control pins yield stan- 
dard EPROM read, standby, output disable or Intelli- 
gent Identifier operations. Both Status Register and 
Intelligent Identifiers can be accessed through the 
Command Register when Vpp = VPPL. 


This same subset of operations is also available 
when high voltage is applied to the Vpp pin. In addi- 
tion, high voltage on Vpp enables successful erasure 
and programming of the device. All functions associ- 
ated 
with 
altering 
memory 
contents-program, 
erase, status, and inteligent Identifier-are 
accessed 
via the Command Register and verified through the 
Status Register. 


Commands are written using standard microproces- 
sor write timings. Register contents serve as input to 
the WSM, which controls the erase and program- 
ming circuitry. Write cycles also internally latch ad- 
dresses and data needed for programming or erase 
operations. With the appropriate command written to 
the register, standard microprocessor read timings 
output array data, access the intelligent identifier 
codes, or output program and erase status for verifi- 
cation. 


Interface software to initiate and poll progress of in- 
ternal program and erase can be stored in any of the 
28F001BX blocks. This code is copied to, and exe- 
cuted from, system RAM during actual flash memory 
update. After successful completion of program 
and/ or erase, code execution out of the 28F001BX 
is again possible via the Read Array command. 
Erase suspend/resume 
capability allows system 
software to suspend block erase and read datal exe- 
cute code from any other block. 


Command 
Register and Write 
Automation 
An on-chip state machine controls block erase and 
byte program, freeing the system processor for other 
tasks. After receiving the erase setup and erase 
confirm 
commands, the 
state 
machine controls 
block pre-conditioning and erase, returning progress 
via the Status Register. Programming is similarly 
controlled, after destination address and expected 
data are supplied. The program algorithm of past In- 
tel Flash Memories is now regulated by the state 
machine, including program pulse repetition where 
required and internal verification and margining of 
data. 


Depending on the application, the system designer 
may choose to make the Vpp power supply switcha- 
ble (available only when memory updates are re- 
quired) or hardwired to VPPH. When Vpp 
= VPPL, 


memory contents cannot be altered. The 28F001BX 
Command Register architecture provides protection 
from unwanted program or erase operations even 
when high voltage is applied to Vpp. Additionally, all 
functions are disabled whenever VCC is below the 
write lockout voltage VLKO, or when RP# is at VIL. 
The 28F001BX accommodates either design prac- 
tice and encourages optimization of the processor- 
memory interface. 


The two-step program/erase write sequence to the 
Command Register provides additional software 
write protection. 


1Eooo 


1DFFF 


10000 


1CFFF 


1COOO 


1BFFF 


04000 


03FFF 


03000 


02FFF 


02000 


01FFF 


Flash 
memory 
reads, 
erases 
and writes 
in-system 
via the local CPU. All bus cycles to or from the flash 
memory 
conform 
to 
standard 
microprocessor 
bus 
cycles. 


The 28F001 BX has three read modes. The memory 
can be read from any of its blocks, 
and information 
can 
be 
read 
from 
the 
Intelligent 
Identifier 
or the 
Status 
Register. 
Vpp can be at either VPPL or VPPH. 


The first task is to write the appropriate 
read mode 
command 
to the Command 
Register 
(array, 
Intelli- 
gent 
Identifier, 
or Status 
Register). 
The 28F001 BX 
automatically 
resets to Read Array mode upon initial 
device 
powerup 
or after exit from deep powerdown. 


The 28F001 BX has four control 
pins, two of which 
must be logically active to obtain data at the outputs. 
Chip Enable 
(CE#) 
is the device 
selection 
control, 
and when 
active 
enables 
the selected 
memory 
de- 
vice. Output 
Enable 
(OE#) 
is the data input/output 
(000-007) 
direction 
control, 
and 
when 
active 
drives data from the selected 
memory 
onto the I/O 
bus. RP# 
and WE# 
must also be at VIH. Figure 12 
illustrates 
read bus cycle waveforms. 


Output Disable 


With OE# 
at a logic-high 
level (VIH), the device out- 
puts 
are 
disabled. 
Output 
pins 
(000-007) 
are 
placed 
in a high-impedance 
state. 


Standby 


CE # at a logic-high 
level (VIH) places the 28F001 BX 
in standby 
mode. Standby 
operation 
disables 
much 
of the 28F001 BX's circuitry 
and substantially 
reduc- 
es device 
power 
consumption. 
The outputs 
(000- 
007) are placed in a high-impedance 
state indepen- 
dent of the status of OE #. If the 28F001 BX is dese- 
lected 
during 
erase 
or 
program, 
the 
device 
will 
continue 
functioning 
and consuming 
normal 
active 
power until the operation 
is completed. 


Deep Power-Down 


The 28F001 BX offers 
a 0.25 J.LWVcc 
power-down 
feature, 
entered 
when 
RP# 
is at VIL. During 
read 
modes, 
RP# 
low deselects 
the memory, 
places out- 
put drivers 
in a high-impedance 
state 
and turns off 
all 
internal 
circuits. 
The 
28F001 BX 
requires 
time 
tpHQV (see 
AC 
Characteristics-Read 
Only 
Opera- 
tions) after return from power-down 
until initial mem- 
ory access outputs are valid. After this wakeup 
inter- 
val, 
normal 
operation 
is restored. 
The 
Command 
Register 
is reset to Read Array, and the Status Reg- 
ister is cleared 
to value 80H, upon return to normal 
operation. 


During erase or program 
modes, 
RP# 
low will abort 
either operation. 
Memory 
contents 
of the block 
be- 
ing altered 
are no longer 
valid 
as the data will be 
partially 
programmed 
or erased. 
Time 
tpHWL after 
RP# 
goes to logic-high 
(VIH) is required 
before 
an- 
other command 
can be written. 


Mode 
Notes 
RP# 
CE# 
OE# 
WE# 
Ag 
Ao 
Vpp 
DQO-7 


Read 
1,2,3 
VIH 
VIL 
VIL 
VIH 
X 
X 
X 
DOUT 


Output 
Disable 
VIH 
VIL 
VIH 
VIH 
X 
X 
X 
HighZ 


Standby 
VIH 
VIH 
X 
X 
X 
X 
X 
HighZ 


Deep Power Down 
VIL 
X 
X 
X 
X 
X 
X 
HighZ 


Intelligent 
Identifier 
(Mfr) 
4 
VIH 
VIL 
VIL 
VIH 
VID 
VIL 
X 
89H 


Intelligent 
Identifier 
(Device) 
4,5 
VIH 
VIL 
VIL 
VIH 
VID 
VIH 
X 
94H,95H 


Write 
6,7,8 
VIH 
VIL 
VIH 
VIL 
X 
X 
X 
DIN 


NOTES: 
1. Refer to DC Characteristics. When VPP = VPPL,memory contents can be read but not programmed or erased. 
2. X can be VIL or VIH for control pins and addresses, and VPPLor VPPHfor Vpp. 
3. See DC Characteristics for VPPL,VPPH,VHHand VID voltages. 
4. Manufacturer and device codes may also be accessed via a Command Register write sequence. Refer to Table 3. A1-Ae, 
A1O-A16 = VIL· 
5. Device ID = 94H for the 28F001BX-T and 95H for the 28F001BX-B. 
6. Command writes involving block erase or byte program are successfully executed only when VPP = VpPH. 
7. Refer to Table 3 for valid DINduring a write operation. 
8. Program or erase the boot block by holding RP# at VHHor toggling OE# to VHH.See AC Waveforms for program/erase 
operations. 


The 
use of RP# 
during 
system 
reset 
is important 
with automated 
write/ erase devices. 
When the sys- 
tem comes 
out of reset it expects 
to read from the 


flash 
memory. 
Automated 
flash 
memories 
provide 


status 
information 
when 
accessed 
during 
write/ 


erase 
modes. 
If a CPU reset 
occurs 
with 
no flash 


memory 
reset, 
proper 
CPU 
initialization 
would 
not 


occur because 
the flash memory would be providing 


the status 
information 
instead 
of array data. 
Intel's 


Flash 
Memories 
allow 
proper 
CPU initialization 
fol- 
lowing 
a system 
reset through 
the use of the RP# 


input. 
In this 
application 
RP# 
is controlled 
by the 
same RESET # signal that resets the system 
CPU. 


Intelligent 
Identifier 
Operation 


The Intelligent 
Identifier 
operation 
outputs the manu- 


facturer 
code, 89H; and the device code, 94H for the 


28F001 BX- T and 
95H 
for 
the 
28F001 BX-B. 
Pro- 


gramming 
equipment 
or the system 
CPU can then 


automatically 
match the device with its proper erase 


and programming 
algorithms. 


PROGRAMMING 
EQUIPMENT 


CE # and OE # at a logic low level (VIU, with Ag at 
high voltage 
VID (see DC Characteristics) 
activates 


this operation. 
Data read from locations 
OOOOOHand 


00001 H represent 
the manufacturer's 
code and the 


device 
code respectively. 


The 
manufacturer- 
and 
device-codes 
can 
also 
be 


read via the Command 
Register. 
Following 
a write of 


90H to the Command 
Register, 
a read from address 


location 
OOOOOH outputs 
the 
manufacturer 
code 


(89H). A read from address 
00001 H outputs 
the de- 
vice code (94H for the 28F001 BX-T and 95H for the 
28F001 BX-B). It is not necessary 
to have high volt- 
age applied 
to Vpp to read the Intelligent 
Identifiers 


from the Command 
Register. 


Writes 
to the Command 
Register 
allow 
read of de- 
vice data and Intelligent 
Identifiers. 
They also con- 


trol inspection 
and clearing 
of the Status 
Register. 
Additionally, 
when Vpp = VPPH, the Command 
Reg- 


ister controls 
device 
erasure 
and programming. 
The 


contents 
of the register serve as input to the internal 


state machine. 


The 
Command 
Register 
itself 
does 
not occupy 
an 


addressable 
memory 
location. 
The register is a latch 


used to store 
the command 
and address 
and data 


information 
needed 
to execute 
the command. 
Erase 


intel~ 


Setup 
and 
Erase 
Confirm 
commands 
require 
both 


appropriate 
command 
data 
and 
an address 
within 


the block 
to be erased. 
The 
Program 
Setup 
Com- 


mand requires 
both appropriate 
command 
data and 


the address of the location 
to be programmed, 
while 


the 
Program 
command 
consists 
of the data 
to be 


written 
and the address 
of the 
location 
to be pro- 


grammed. 


The Command 
Register 
is written 
by bringing 
WE # 


to a logic-low 
level (VIU while CE # is low. Address- 


es and data are latched 
on the rising edge of WE # . 


Standard 
microprocessor 
write timings 
are used. 


Refer to AC Write Characteristics 
and the AC Wave- 


form for Write Operations, 
Figure 13, for specific 
tim- 


ing parameters. 


COMMAND 
DEFINITIONS 


When 
VPPL is applied 
to the Vpp pin, read opera- 


tions from the Status 
Register, 
intelligent 
identifiers, 


or array 
blocks 
are enabled. 
Placing 
VPPH on Vpp 


enables 
successful 
program 
and 
erase 
operations 


as well. 


Device 
operations 
are selected 
by writing 
specific 


commands 
into the Command 
Register. 
Table 3 de- 


fines these 28F001 BX commands. 


Read Array Command 


Upon 
initial 
device 
powerup 
and 
after 
exit 
from 


deep-powerdown 
mode, 
the 28F001 BX defaults 
to 


Read Array mode. This operation 
is also initiated 
by 


writing 
FFH into the Command 
Register. 
Microproc- 


essor read cycles retrieve 
array data. The device re- 


mains enabled 
for reads until the Command 
Regis- 


ter 
contents 
are 
altered. 
Once 
the 
internal 
write 


state 
machine 
has started 
an erase or program 
op- 


eration, the device will not recognize 
the Read Array 


command, 
until the WSM 
has completed 
its opera- 


tion. The Read Array 
command 
is functional 
when 


Vpp = VpPL or VPPH. 


Intelligent 
Identifier 
Command 
for 
In-System 
Programming 


The 28F001 BX contains 
an Intelligent 
Identifier 
op- 


eration 
to 
supplement 
traditional 
PROM-program- 


ming methodology. 
The operation 
is initiated 
by writ- 


ing 90H into the Command 
Register. 
Following 
the 


command 
write, a read cycle from address 
OOOOOH 
retrieves 
the manufacturer 
code of 89H. A read cy- 


cle from address 
00001 H returns the device code of 


94H (28F001 BX-T) or 95H (28F001 BX-B). To termi- 
nate the operation, 
it is necessary 
to write 
another 


valid command 
into the register. 
Like the Read Array 


command, 
the Intelligent 
Identifier 
command 
is func- 


tional when VPP = VPPL or VPPH. 


Bus 
First Bus Cycle 
Second 
Bus Cycle 
Command 
Cycles 
Notes 
Req'd 
Operation 
Address 
Data 
Operation 
Address 
Data 


Read Array/Reset 
1 
1 
Write 
X 
FFH 


Intelligent 
Identifier 
3 
2,3,4 
Write 
X 
90H 
Read 
IA 
110 


Read Status Register 
2 
3 
Write 
X 
70H 
Read 
X 
SRD 


Clear Status Register 
1 
Write 
X 
50H 


Erase Setup/Erase 
Confirm 
2 
2 
Write 
BA 
20H 
Write 
BA 
DOH 


Erase Suspend/Erase 
Resume 
2 
Write 
X 
BOH 
Write 
X 
DOH 


Program Setup/Program 
2 
2,3 
Write 
PA 
40H 
Write 
PA 
PO 


NOTES: 
1. Bus operations are defined in Table 2. 
2. IA = Identifier Address: OOHfor manufacturer code, 01H for device code. 
BA = Address within the block being erased. 
PA = Address of memory location to be programmed. 
3. SRD = Data read from Status Register. See Table 4 for a description of the Status Register bits. 
PD = Data to be programmed at location PA. Data is latched on the rising edge of WE/!. 
liD = Data read from Intelligent Identifiers. 
4. Following the Intelligent Identifier command, two read operations access manufacture and device codes. 
5. Commands other than those shown above are reserved by Intel for future device implementations and should not be 
used. 


Read Status Register Command 


The 
28F001 BX contains 
a Status 
Register 
which 
may be read to determine 
when a program 
or erase 
operation 
is complete, 
and whether 
that 
operation 
completed 
successfully. 
The Status Register 
may be 
read at any time by writing the Read Status Register 
command 
(70H) 
to the 
Command 
Register. 
After 
writing 
this 
command, 
all subsequent 
read 
opera- 
tions output 
data from the Status 
Register, 
until an- 
other 
valid 
command 
is written 
to 
the 
Command 
Register. 
The 
contents 
of the 
Status 
Register 
are 
latched 
on the falling 
edge of DE # or CE #, which- 
ever 
occurs 
last 
in the 
read 
cycle. 
DE # or CE # 
must be toggled 
to VIH before 
further 
reads to up- 
date 
the 
Status 
Register 
latch. 
The 
Read 
Status 
Register 
command 
functions 
when Vpp = VPPL or 
VPPH· 


The Erase Status and Program Status bits are set to 
"1" 
by the 
Write 
State 
Machine 
and 
can 
only 
be 


reset by the Clear Status Register 
command. 
These 
bits indicate 
various failure conditions 
(see Table 4). 
By allowing 
system 
software 
to control 
the resetting 
of these 
bits, several 
operations 
may be performed 
(such as cumulatively 
programming 
several 
bytes or 
erasing 
multiple 
blocks 
in sequence). 
The 
Status 
Register 
may then be polled to determine 
if an error 
occurred 
during 
that 
series. 
This adds 
flexibility 
to 
the way the device 
may be used. 


Additionally, 
the Vpp Status 
bit (SR.3), when 
set to 
"1", 
MUST be reset by system 
software 
before 
fur- 
ther byte programs 
or block 
erases 
are attempted. 


To clear the Status Register, 
the Clear Status Regis- 
ter command 
(50 H) is written 
to the Command 
Reg- 
ister. The Clear 
Status 
Register 
command 
is func- 
tional when Vpp = VPPL or VPPH. 
• 


WSMS 
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6 


SR.? = WRITE STATE MACHINE STAHJS 
1 = Ready 
o = Busy 


SR.6 = ERASE SUSPEND STATUS 
1 = Erase Suspended 
o = Erase In Progress/Completed 


SR.5 = ERASE STATUS 
1 = Error in Block Erasure 
o = Successful Block Erase 


SR.4 = PROGRAM STATUS 
1 = Error in By1eProgram 
o = Successful By1eProgram 


SR.3 = Vpp STATUS 
1 = Vpp Low Detect; Operation Abort 
0= 
Vpp OK 


SR.2-SR.O = RESERVED FOR FUTURE ENHANCE- 
MENTS 
These bits are reserved for future use and should be 
masked out when polling the Status Register. 


Erase Setup/Erase 
Confirm 
Commands 


Erase is executed 
one block at a time, initiated 
by a 
two-cycle 
command 
sequence. 
An 
Erase 
Setup 
command 
(20H) 
is first 
written 
to 
the 
Command 
Register, 
followed 
by the Erase 
Confirm 
command 
(DOH). These 
commands 
require 
both 
appropriate 
command 
data and an address 
within 
the block 
to 
be erased. 
Block 
preconditioning, 
erase 
and verify 
are all handled internally 
by the Write State Machine, 
invisible 
to the system. 
After receiving 
the two-com- 
mand erase sequence, 
the 28F001 BX automatically 
outputs 
Status 
Register 
data when 
read (see Figure 
10; Block Erase Flowchart). 
The CPU can detect the 
completion 
of the erase event by checking 
the WSM 
Status 
bit of the Status 
Register 
(SR.7). 


When 
the 
Status 
Register 
indicates 
that 
erase 
is 
complete, 
the Erase Status bit should be checked. 
If 
erase 
error 
is detected, 
the Status 
Register 
should 
be cleared. The Command 
Register 
remains in Read 
Status Register 
Mode until further 
commands 
are is- 
sued to it. 


This two-step 
sequence 
of set-up followed 
by execu- 
tion ensures 
that memory 
contents 
are not acciden- 
tally 
erased. 
Also, 
block 
erasure 
can 
only 
occur 
when Vpp = VpPH. In the absence 
of this high volt- 
age, 
memory 
contents 
are 
protected 
against 
era- 
sure. If block erase is attempted 
while Vpp = VPPL, 


VPPS 
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NOTES: 
The Write State Machine Status Bit must first be checked 
to determine program or erase completion, before the 
Program or Erase Status bits are checked for success. 


If the Program AND Erase Status bits are set to "1s" dur- 
ing an erase attempt, an improper command sequence 
was entered. Attempt the operation again. 


If Vpp low status is detected, the Status Register must be 
cleared before another program or erase operation is at- 
tempted. 


The Vpp Status bit, unlike an AID converter, does not 
provide continuous indication of Vpp level. The WSM in- 
terrogates the Vpp level only after the program or erase 
command sequences have been entered and informs the 
system if Vpp has not been switched on. The Vpp Status 
bit is not guaranteed to report accurate feedback be- 
tween VPPLand VPPH· 


the Vpp Status bit will be set to "1". 
Erase attempts 
while VPPL < Vpp < VPPH produce 
spurious 
results 
and should 
not be attempted. 


Erase Suspend/Erase 
Resume 
Commands 


The 
Erase 
Suspend 
Command 
allows 
erase 
se- 
quence 
interruption 
in order to read data from anoth- 
er block 
of memory. 
Once 
the 
erase 
sequence 
is 
started, 
writing the Erase Suspend 
command 
(BOH) 
to the Command 
Register 
requests 
that 
the WSM 
suspend 
the 
erase 
sequence 
at a predetermined 
point in the erase algorithm. 
The 28F001 BX contin- 
ues to output 
Status 
Register 
data when read, after 
the Erase Suspend 
command 
is written 
to it. Polling 
the WSM Status and Erase Suspend 
Status bits will 
determine 
when the erase operation 
has been sus- 
pended 
(both will be set to "1s"). 


At this point, a Read Array command 
can be written 
to the Command 
Register 
to read data from blocks 
other than that which Is suspended. 
The only oth- 
er valid commands 
at this time are Read Status Reg- 
ister (70H) and Erase Resume 
(DOH), at which time 
the WSM will continue 
with the erase sequence. 
The 
Erase Suspend 
Status 
and WSM Status 
bits of the 
Status 
Register 
will be cleared. 
After the Erase Re- 
sume command 
is written 
to it, the 28F001 BX auto- 
matically 
outputs 
Status 
Register 
data 
when 
read 
(see Figure 11; Erase Suspend/Resume 
Flowchart). 


Programming is executed by a two-write sequence. 
The program Setup command (40H) is written to the 
Command Register, followed by a second write 
specifying the address and data (latched on the ris- 
ing edge of WE#) to be programmed. The WSM 
then takes over, controlling the program and verify 
algorithms internally. After the two-command pro- 
gram sequence is written to it, the 28F001BX auto- 
matically outputs Status Register data when read 
(see figure 9; Byte Program Flowchart). The CPU 
can detect the completion of the program event by 
analyzing the WSM Status bit of the Status Register. 
Only the Read Status Register command is valid 
while programming is active. 


When the Status Register indicates that program- 
ming is complete, the Program Status bit should be 
checked. If program error is detected, the Status 
Register should be cleared. The internal WSM verify 
only detects errors for "1s" that do not successfully 
program to "Os". The Command Register remains in 
Read Status Register mode until further commands 
are issued to it. If byte program is attempted while 
Vpp = VPPL, the Vpp Status bit will be set to "1". 
Program attempts while VPPL < Vpp < VPPH pro- 
duce spurious results and should not be attempted. 


EXTENDED 
ERASE/PROGRAM 
CYCLING 


EEPROM cycling failures have always concerned 
users. The high electrical field required by thin oxide 
EEPROMs for tunneling can literally tear apart the 
oxide at defect regions. To combat this, some sup- 
pliers have implemented redundancy schemes, re- 
ducing cycling failures to insignificant levels. Howev- 
er, redundancy requires that cell size be doubled; an 
expensive solution. 


Intel has designed extended cycling capability into 
its ETOX flash memory technology. Resulting im- 
provements in cycling reliability come without in- 
creasing memory cell size or complexity. First, an 
advanced tunnel oxide increases the charge carry- 
ing ability ten-fold. Second, the oxide area per cell 
subjected to the tunneling electrical field is one- 
tenth that of common EEPROMs, minimizing the 
probability of oxide defects in the region. Finally, the 
peak electric field during erasure is approximately 2 
Mv/cm lower than EEPROM.The lower electric field 
greatly reduces oxide stress and the probability of 
failure; increasing time to wearout by a factor of 
100,000,000. 


The 28F001BX-B and 28F001BX-T are capable of 
100,000 program/erase cycles on each of the two 
parameter blocks, main block and boot block. 


QN-CHIP 
PROGRAMMING 
ALGORITHM 


The 28F001BX integrates the Quick Pulse program- 
ming algorithm of prior Intel Flash Memory devices 
on-chip, using the Command Register, Status Regis- 
ter and Write State Machine (WSM). On-chip inte- 
gration dramatically simplifies system software and 
provides processor-like 
interface timings to 
the 
Command and Status Registers. WSM operation, in- 
ternal program verify and Vpp high voltage presence 
are monitored and reported via appropriate Status 
Register bits. Figure 9 shows a system software 
flowchart for device programming. The entire se- 
quence is performed with Vpp 
at VPPH. Program 
abort occurs when RP# transitions to VIL, or Vpp 
drops to VPPL. Although the WSM is halted, byte 
data is partially programmed at the location where 
programming was aborted. Block erasure or a re- 
peat of byte programming will initialize this data to a 
known value. 


As above, the Quick Erase algorithm of prior Intel 
Flash Memory devices is now implemented internal- 
ly, including all preconditioning of block data. WSM 
operation, erase success and Vpp high voltage pres- 
ence are monitored and reported through the Status 
Register. Additionally, if a command other than 
Erase Confirm is written to the device after Erase 
Setup has been written, both the Erase Status and 
Program Status bits will be set to "1". When issuing 
the Erase Setup and Erase Confirm commands, they 
should be written to an address within the address 
range of the block to be erased. Figure 10 shows a 
system software flowchart for block erase. 


Erase typically takes 1-4 seconds per block. The 
Erase Suspend/Erase Resume command sequence 
allows interrupt of this erase operation to read data 
from a block other than that in which erase Is 
being performed. A system software flowchart is 
shown in Figure 11. 


The entire sequence is performed with Vpp at VPPH. 
Abort occurs when RP# transitions to VIL or Vpp 
falls to VPPL, while erase is in progress. Block data is 
partially erased by this operation, and a repeat of 
erase is required to obtain a fully erased block. 


The boot block is intended to contain secure code 
which will minimally bring up a system and control 
programming and erase of other blocks of the de- 
vice, if needed. Therefore, additional "lockout" pro- 
tection is provided to guarantee data integrity. Boot 
block program and erase operations are enabled 
through high voltage VHH on either RP# or OE#, 
and the normal program and erase command se- 
quences are used. Reference the AC Waveforms for 
Program/Erase. 


If boot block program or erase is attempted while 
RP# is at VIH, either the Program Status or Erase 
Status bit will be set to "1 ", reflective of the opera- 


Program/erase attempts while VIH < RP# < VHH 
produce spurious results and should not be attempt- 
ed. 


In-System 
Operation 


For on-board programming, the RP# pin is the most 
convenient means of altering the boot block. Before 
issuing Program or Erase confirms commands, RP# 
must transition to VHH. Hold RP# at this high volt- 
age throughout the program or erase interval (until 
after Status Register confirm of successful comple- 
tion). At this time, it can return to VIH or VIL. 


Bus 
Command 
Comments 
Operation 


Write 
Program 
Data = 40H 


Setup 
Address 
= Byte to be 
Programmed 


Write 
Program 
Data to be programmed 
Address 
= Byte to be 
Programmed 


Read 
Status 
Register 
Data. 


ToggleOE# 
orCE# 
to 
update Status 
Register 
Standby 
CheckSR.7 
1 = Ready, 0 = Busy 


Repeat 
for subsequent 
bytes. 


Full status check can be done after each byte or after a 
sequence 
of bytes. 


Write FFH after the last byte programming 
operation 
to 
reset the device to Read Array Mode. 


Bus 
Command 
Comments 
OperatIon 


Standby 
Check 
SR.3 


1 = Vpp Low Detect 


Standby 
CheckSR.4 
1 = Byte Program 
Error 


SR.3 MUST be cleared, 
if set during a program 
attempt, 


before further 
attempts 
are allowed 
by the Write State 
Machine. 


SR.4 is only cleared 
by the Clear Status 
Register 
Command, 
in cases where multiple 
bytes are 


programmed 
before full status is checked. 


If error is detected, 
clear the Status 
Register 
before 


attempting 
retry or other error recovery. 
I 
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Bus 
Command 
Comments 
Operation 


Write 
Erase 
Data = 20H 
Setup 
Address = Within Block to be erased 


Write 
Erase 
Data = DOH 
Address 
- 
Within Block to be erased 


Read 
Status Register Data. 
Toggle OE # or CE # to update Status 


Register 


Standby 
CheckSR.7 
1 - 
Ready, 0 ~ Busy 


Repeat for subsequent blocks. 


Full status check can be done after each block or after a sequence of 
blocks. 


Write FFH after the last block erase operation 
to reset the device to 
Read Array Mode. 


BUI 
Command 
Comments 
Operation 


Standby 
CheckSR.3 
1 - 
Vpp Low Detect 


Standby 
Check SR.4, 5 


Both 1 = Command 
Sequence 
Error 


Standby 
CheckSR.5 
1 = Block Erase 
Error 


SR.3 MUST 
be cleared, 
if set during an erase attempt, 
before further 
attempts 
are allowed 
by the Write State Machine. 


SR.5 
is only cleared 
by the Clear Status Register 
Command, 
in cases 


where 
multiple blocks are erased 
before full status is checked. 


If error is detected, 
clear the Status Register 
before attempting 
retry or 


other error recovery. 
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Bus 
Command 
Comments 
Operation 


Write 
Erase 
Data = BOH 


Suspend 


Write 
Erase 
Data = ?OH 
Status 
Register 


Standbyl 
Read Status 
Register 
Read 
Check 
SR.? 


1 = Ready, 0 = Busy 
ToggleOE# 
orCE# 
to 
Update Status 
Register 


Standby 
Check 
SR.6 


1 = Suspended 


Write 
Read Array 
Data = FFH 


Read 
Read array data from 
block other than that 
being erased. 


Write 
Erase Resume 
Data = DOH 


Programming 
Equipment 


For PROM programming equipment that cannot 
bring RP# to high voltage, OE# provides an alter- 
nate boot block access mechanism. OE# must tran- 
sition to VHHa minimum of 480 ns before the initial 
program/erase setup command and held at VHHat 
least 480 ns after program or erase confirm com- 
mands are issued to the device. After this interval, 
OE# can return to normal TTL levels. 


DESIGN 
CONSIDERATIONS 


Three-Line 
Output Control 
Flash memories are often used in larger memory ar- 
rays. Intel provides three control inputs to accommo- 


date multiple memory connections. Three-line con- 
trol provides for: 
a) lowest possible memory power dissipation 
b) complete assurance that data bus contention will 


not occur 


To efficiently use these control inputs, an address 
decoder should enable CE#, while OE# should be 
connected to all memory devices and the system's 
READ# control line. This assures that only selected 
memory devices have active outputs while deselect- 
ed memory devices are in Standby Mode. RP# 
should be connected to the system POWERGOOD 
signal to prevent unintended writes during system 
power transitions. POWERGOOD should also toggle 
during system reset. 


Flash memory power switching characteristics re- 
quire careful device coupling. System designers are 
interested in 3 supply current issues; standby current 
levels (IS8), active current levels (Icel and transient 
peaks producted by falling and rising edges of CE#. 
Transient current magnitudes depend on the device 
outputs' capacitive and inductive loading. Two-line 
control and proper decoupling capacitor selection 
will suppress transient voltage peaks. Each device 
should have a 0.1 p.F ceramic capacitor connected 
between its Vcc and GND, and between its Vpp and 
GND. These high frequency, low inherent-induc- 
tance capacitors should be placed as close as pos- 
sible to the device. Additionally, for every 8 devices, 
a 4.7 p.F electroly1ic capacitor should be placed at 
the array's power supply connection between Vcc 
and GND. The bulk capacitor will overcome voltage 
slumps caused by PC board trace inductances. 


Vpp Trace on Printed Circuit Boards 


Programming flash memories, while they reside in 
the target system, requires that the printed circuit 
board designer pay attention to the Vpp power sup- 
ply trace. The Vpp pin supplies the memory cell cur- 
rent for programming. Use similar trace widths and 
layout considerations given to the Vcc power bus. 
Adequate Vpp supply traces and decoupling will de- 
crease Vpp voltage spikes and overshoots. 


Vcc, Vpp, RP# 
Transitions 
and the 
Command/Status 
Registers 


Programming and erase completion are not guaran- 
teed if Vpp drops below VPPH.If the Vpp Status bit of 
the Status Register (SR.3) is set to "1", a Clear 
Status Register command MUST be issued before 
further program/erase attempts are allowed by the 
WSM. Otherwise, the 
Program (SR.4) or Erase 
(SR.5) Status bits of the Status Register will be set 
to "1" 
if error is detected. RP# transitions to VIL 
during program and erase also abort the operations. 
Data is partially altered in either case, and the com- 
mand sequence must be repeated after normal op- 
eration is restored. Device poweroff, or RP# tran- 
sitions to VIL, clear the Status Register to initial val- 
ue 80H. 


The Command Register latches commands as is- 
sued by system software and is not altered by Vpp 
or CE# transitions or WSM actions. Its state upon 
powerup, after exit from Deep-Powerdown or after 
Vcc transitions below VLKO,is FFH, or Read Array 
Mode. 


must be reset to read array mode via the Read Array 
command if access to the memory array is desired. 


Power Up/Down 
Protection 


The 28F001BX is designed to 
offer 
protection 
against accidental erasure or programming during 
power transitions. Upon power-up, the 28F001BX is 
indifferent as to which power supply, Vpp or Vcc, 
powers up first. Power supply sequencing is not re- 
quired. Internal circuitry in the 28F001BX ensures 
that the Command Register is reset to Read Array 
mode on power up. 


A system designer must guard against spurious 
writes for Vcc voltages above VLKO when Vpp is 
active. Since both WE# and CE# must be low for a 
command write, driving either to VIH will inhibit 
writes. The Command Register architecture provides 
an added level of protection since alteration of mem- 
ory contents only occurs after successful completion 
of the two-step command sequences. 


Finally, the device is disabled, until RP# is brought 
to VIH, regardless of the state of its control inputs. 
This provides an additional level of protection. 


When designing portable systems, designers must 
consider battery power consumption not only during 
device operation, but also for data retention during 
system idle time. Flash nonvolatility increases us- 
able battery life because the 28F001BX does not 
consume any power to retain code or data when the 
system is off. 


In addition, the 28F001BX's Deep-Powerdown mode 
ensures extremely low power dissipation even when 
system power is applied. For example, laptop and 
other PC applications, after copying BIOS to DRAM, 
can lower RP# to VIL, producing negligible power 
consumption. If access to the boot code is again 
needed. as in case of a system RESET#. the part 
can again be accessed, following the tpHAVwakeup 
cycle required after RP# is first raised back to VIH. 
The first address presented to the device while in 
powerdown requires time tpHAV, after RP# 
tran- 
sitions high, before outputs are valid. Further ac- 
cesses follow normal timing. See AC Characteris- 
tics-Read-Only 
Operations and Figure 12 for more 
information. 
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cations are subject to change without notice. 


• WARNING: Stressing the device beyond the "Absolute 
Maximum 
Ratings" 
may 
cause 
permanent 
damage. 


These are stress ratings 
only. Operation 
beyond 
the 


"Operating 
Conditions" 
is not recommended 
and ex- 


tended 
exposure 
beyond 
the 
"Operating 
Conditions" 


may affect device reliability. 


Operating 
Temperature 


During Read 
O°C to 70°C(1) 


During Erase/Program 
O°C to 70°C(1) 


Operating 
Temperature 
During Read 
- 40°C to + 85°C(2) 


During Erase/Program 
-40°C 
to + 85°C(2) 


Temperature 
under Bias 
-10°C 
to 80°C(1) 


Temperature 
under Bias 
- 20°C to + 90°C(2) 


Storage Temperature 
-65°C 
to 125°C 


Voltage 
on Any Pin 
(except 
Ag, RP#, 
OE#, 
Vee and Vpp) 


with Respect 
to GND 
-2.0V 
to 7.0V(3) 


Voltage 
on Ag, RP#, 
and OE# 
with Respect 
to GND 
- 2.0V to 13.5V(3, 4) 


Vpp Program 
Voltage 
with Respect 
to GND 
During Erase/Program 
-2.0V 
to 14.0V(3, 4) 


Vee Supply Voltage 


with Respect 
to GND 
- 2.0V to 7.0V(3) 


Output Short Circuit Current 
100 mA(5) 


NOTES: 
1. Operating temperature is for commercial product defined by this specification. 
2. Operating temperature is for extended temperature product defined by this specification. 
3. Minimum DC voltage 1s -0.5V 
on input/output pins. During transitions. this level may undershoot to -2.0V 
for periods 
<20 ns. Maximum DC voltage on input/output pins is Vcc +0.5V which, during transitions, may overshoot to VCC + 2.0V 
for periods < 20 ns. 
4. Maximum DC voltage on Ag or Vpp may overshoot to + 14.0V for periods <20 ns. 
5. Output shorted for no more than one second. No more than one output shorted at a time. 


Symbol 
Parameter 
Min 
Max 
Unit 


TA 
Operating 
Temperature(1) 
0 
70 
°C 


TA 
Operating 
Temperature(2) 
-40 
85 
°C 


Vee 
Supply Voltage 
4.50 
5.50 
V 


Symbol 
Parameter 
Notes 
Mln 
Typ 
Max 
Unit 
Test Conditions 


IlL 
Input Load Current 
1 
±1.0 
,."A 
Vee = VeeMax 
VIN = Vee or GND 


ILO 
Output Leakage Current 
1 
±10 
,."A 
Vee = VeeMax 
VOUT = Vee or GND 


Ices 
Vee Standby Current 
1.2 
2.0 
mA 
Vee = VeeMax 
CE# 
= RP# 
= VIH 


30 
100 
,."A 
Vee = VeeMax 
CE# 
= RP# 
= Vee ±O.2V 


IceD 
Vee Deep-Powerdown 
Current 
1 
0.05 
1.0 
,."A 
RP# = GND ±0.2V 


Symbol 
Parameter 
Notes 
Mln 
Typ 
Max 
Unit 
Test Conditions 


leeR 
Vee Read Current 
1 
13 
30 
mA 
Vee = Vee Max, CE# 
= VIL 


f = 8 MHz, lOUT = 0 mA 


leep 
Vee Programming 
Current 
1 
5 
20 
mA 
Programming 
in Progress 


IeeE 
Vee Erase Current 
1 
6 
20 
mA 
Erase in Progress 


leeEs 
Vee Erase Suspend 
Current 
1,2 
5 
10 
mA 
Erase Suspended 
CE# 
= VIH 


Ipps 
Vpp Standby 
Current 
1 
±1 
±10 
p.A Vpp:>; Vee 


90 
200 
p.A Vpp> 
Vee 


Ippo 
Vpp Deep-Powerdown 
Current 
1 
0.80 
1.0 
p.A 
RP# 
= GND ±0.2V 


Ippp 
Vpp Programming 
Current 
1 
6 
30 
mA 
Vpp = VPPH 
Programming 
in Progress 


IpPE 
Vpp Erase Current 
1 
6 
30 
mA 
Vpp = VPPH 
Erase in Progress 


IpPES 
Vpp Erase Suspend 
Current 
1 
90 
300 
p.A Vpp = VPPH 


Erase Suspended 


110 
Ag Intelligent 
Identifier 
Current 
1 
90 
500 
p.A Ag = VIO 


VIL 
Input Low Voltage 
-0.5 
0.8 
V 


VIH 
Input High Voltage 
2.0 
Vee + 0.5 
V 


VOL 
Output 
Low Voltage 
0.45 
V 
Vee = VeeMin 
IOL = 5.8 mA 


VOH 
Output High Voltage 
2.4 
V 
Vee = VeeMin 
IOH = 2.5mA 


VIO 
Ag Intelligent 
Identifier Voltage 
11.5 
13.0 
V 


VPPL 
Vpp during Normal Operations 
3 
0.0 
6.5 
V 


VPPH 
Vpp during Prog/Erase 
Operations 
11.4 
12.0 
12.6 
V 


VLKO 
Vee Erase/Write 
Lock Voltage 
2.5 
V 


VHH 
RP #, OE # Unlock Voltage 
11.4 
12.6 
V 
Boot Block Prog/Erase 


Symbol 
Parameter 
Notes 
Min 
Typ 
Max 
Unit 
Test Conditions 


IlL 
Input Load Current 
1 
± 1.0 
p.A 
Vee = VeeMax 
VIN = Vee or GND 


ILO 
Output 
Leakage Current 
1 
±10 
p.A 
Vee = Vee Max 
VOUT = Vee or GND 


Ices 
Vee Standby 
Current 
1.2 
2.0 
mA 
Vee = Vee Max 
CE# 
= RP# 
= VIH 


30 
150 
p.A 
Vee = VeeMax 
CE# 
= RP# 
= Vec 
±0.2V 
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Symbol 
Parameter 
Notes 
Mln 
Typ 
Max 
Unit 
Test Conditions 


ICCD 
Vcc Deep-Powerdown 
Current 
1 
0.05 
2.0 
/LA 
RP# = GND ±0.2V 


ICCR 
Vcc Read Current 
1 
13 
35 
mA 
Vcc = Vcc Max, CE# 
= VIL 
f = 8 MHz, lOUT = 0 mA 


Iccp 
Vcc Programming 
Current 
1 
5 
20 
mA 
Programming 
in Progress 


ICCE 
Vcc Erase Current 
1 
6 
20 
mA 
Erase in Progress 


ICCES 
Vcc Erase Suspend 
Current 
1,2 
5 
10 
mA 
Erase Suspended 


CE# 
= VIH 


Ipps 
Vpp Standby 
Current 
1 
±1 
•..±10 
/LA Vpp:5: Vcc 


90 
400 
/LA Vpp> 
Vcc 


IpPD 
Vpp Deep-Powerdown 
Current 
1 
0.80 
1.0 
/LA 
RP# 
= GND ±0.2V 


Ippp 
Vpp Programming 
Current 
1 
6 
30 
/LA Vpp = VPPH 
Programming 
in Progress 


IpPE 
Vpp Erase Current 
1 
6 
30 
mA 
Vpp = VPPH 
Erase in Progress 


IpPES 
Vpp Erase Suspend 
Current 
1 
90 
400 
/LA Vpp = VPPH 
Erase Suspended 


liD 
Ag Intelligent 
Identifier Current 
1 
90 
500 
/LA Ag = VID 


VIL 
Input Low Voltage 
-0.5 
0.8 
V 


VIH 
Input High Voltage 
2.0 
Vcc + 0.5 
V 


VOL 
Output Low Voltage 
0.45 
V 
Vcc = VccMin 
IOL = 5.8 mA 


VOH 
Output High Voltage 
2.4 
V 
Vcc = VccMin 
IOH = 2.5mA 


VID 
Ag Intelligent 
Identifier Voltage 
11.5 
13.0 
V 


VPPL 
Vpp during Normal Operations 
3 
0.0 
6.5 
V 


VPPH 
Vpp during Prog/Erase 
Operations 
11.4 
12.0 
12.6 
V 


VLKO 
Vcc Erase/Write 
Lock Voltage 
2.5 
V 


VHH 
RP #, OE # Unlock Voltage 
11.4 
12.6 
V 
Boot Block Prog/Erase 


Symbol 
Parameter 
Max 
Unit 
Conditions 


CIN 
Input Capacitance 
8 
pF 
VIN = OV 


COUT 
Output Capacitance 
12 
pF 
VOUT = OV 


NOTES: 
1. All currents 
are in RMS unless 
otherwise 
noted. 
Typical 
values 
at Vcc = 5.0V, Vpp = 12.0V, TA = 25'C. 
These 
currents 
are valid for all product 
versions 
(packages 
and speeds). 


2. ICCES is specified 
with the device 
deselected. 
If the 28F001 BX is read while 
in Erase Suspend 
mode, 
current 
draw is the 
sum of ICCES and ICCR. 
3. Erase/Programs 
are inhibited 
when 
Vpp = VPPL and not guaranteed 
in the range between 
VPPH and VPPL. 


4. Sampled, 
not 100% 
tested. 


2.4 
__ 
IN_P_UT 
__ X~:~>TESTS~OINTS < X~:~ 
OUTPUT 
0.45 
si 


290406-10 
A.C. test 
inputs 
are driven 
at VOH (2.4 Vnu 
for a Logic 
"1" 
and VOL (0.45 
Vnu 
for 
a Logic 
"0". 
Input 
timing 
begins 
at VIH (2.0 Vnu 
and 
VIL (0.8 
Vnu. 
Output 
timing 
ends 
at VIH and VIL' Input 
rise and fall times 
(10% 
to 
90%) 
< 10 ns. 


1N914 


RL 


CL = 100 pF 
CL Includes 
Jig Capacitance 
RL = 3.3 kfi 


E28FOO1BX·150 


E28FOO1BX·120 
TE28FOO1BX·150 


Verslons(2) 
VCC ±10% 
N28FOO1BX·120 
N28FOO1BX·150 


P28FOO1BX·120 
TN28FOO1BX·150 
Unit 


I 
P28FOO1BX·150 


Symbol 
Parameter 
Notes 
Mln 
Max 
Mln 
Max 


tAVAV 
tAC 
Read 
Cycle 
Time 
120 
150 
ns 


tAVQV 
tACC 
Address 
to Output 
Delay 
120 
150 
ns 


tELQV 
leE 
CE # to Output 
Delay 
3 
120 
150 
ns 


tpHQV 
tpWH 
RP# 
High to Output 
Delay 
600 
600 
ns 


tGLQV 
toE 
OE # to Output 
Delay 
3 
50 
55 
ns 


tELQX 
tLZ 
CE # to Output 
Low Z 
4 
0 
0 
ns 


tEHQZ 
tHZ 
CE # High to Output 
High Z 
4 
55 
55 
ns 


tGLQX 
toLZ 
OE # to Output 
Low Z 
4 
0 
0 
ns 


tGHQZ 
tOF 
OE # High to Output 
High Z 
4 


II 
30 
30 
ns 


toH 
Output 
Hold from 
4 
0 
0 
ns 
Addresses, 
CE # or OE # 


Change, 
Whichever 
is First 


NOTES: 
1. See AC Input/Output 
Reference 
Waveform 
for timing 
measurements. 
2. Model 
Number 
Prefixes: 
E = TSOP 
(Standard 
Pinout), 
N = PLCC, P = PDIP, T = Extended 
Temperature. 


3. OE# 
may be delayed 
up to teE-toE 
after the falling 
edge of CE# 
without 
impact 
on teE. 


4. Sampled, 
not 100% 
tested. 
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290406-12 


Versions 
I 
Vcc 
±10% 
28FOO1BX·120 
28FOO1BX·150 
Unit 
Symbol 
Parameter 
Notes 
Mln 
Max 
Mln 
Max 


tAVAV 
twc 
Write Cycle Time 
120 
150 
ns 


tpHWL 
tps 
RP# 
High Recovery 
to WE# 
Going Low 
2 
480 
480 
ns 


tELWL 
tes 
CE # Setup to WE # Going Low 
10 
10 
ns 


tWLWH 
twP 
WE # Pulse Width 
50 
50 
ns 


tpHHWH 
tpHS 
RP# 
VHH Setup to WE# 
Going High 
2 
100 
100 
ns 


tVPWH 
tvps 
VPPSetup to WE # Going High 
2 
100 
100 
ns 


tAVWH 
tAS 
Address 
Setup to WE # Going High 
3 
50 
50 
ns 


tDVWH 
tDS 
Data Setup to WE # Going High 
4 
50 
50 
ns 


tWHDX 
tDH 
Data Hold from WE # High 
10 
10 
ns 


tWHAX 
tAH 
Address 
Hold from WE # High 
10 
10 
ns 


tWHEH 
teH 
CE# 
Hold from WE# 
High 
10 
10 
ns 


tWHwL 
tWPH 
WE # Pulse Width High 
50 
50 
ns 


tWHQV1 
Duration of Programming 
Operation 
5,6,7 
15 
15 
f-Ls 


tWHQV2 
Duration of Erase Operation 
(Boot) 
5,6,7 
1.3 
1.3 
sec 


tWHQV3 
Duration of Erase Operation 
(Parameter) 
5,6,7 
1.3 
1.3 
sec 


tWHQV4 
Duration of Erase Operation 
(Main) 
5,6,7 
3.0 
3.0 
sec 


tWHGL 
Write Recovery 
before Read 
0 
0 
f-Ls 


taWL 
tVPH 
Vpp Hold from Valid SRD 
2,6 
0 
0 
ns 


taVPH 
tpHH 
RP# 
VHH Hold from Valid SRD 
2,7 
0 
0 
ns 


tpHBR 
Boot-Block 
Relock Delay 
2 
100 
100 
ns 


Versions 
I 
Vcc 
±10% 
28FOO1BX-120 
28FOO1BX-150 
Unit 
Symbol 
Parameter 
Notes 
Min 
Max 
Mln 
Max 


tGHHWL I 
OE # VHH Setup to WE # Going Low 
2,8 
480 
480 
ns 


tWHGH I 
OE # VHH Hold from WE # High 
2,8 
480 
480 
ns 


NOTES: 
1. Read timing characteristics during erase and program operations are the same as during read-only operations. Refer to 
AC Characteristics for Read-Only Operations. 
2. Sampled, not 100% tested. 
3. Refer to Table 3 for valid AIN for byte programming or block erasure. 
4. Refer to Table 3 for valid DINfor byte programming or block erasure. 
5. The on-chip Write State Machine incorporates all program and erase system functions and overhead of standard Intel 
Flash Memory, including byte program and verify (programming) and block precondition, precondition verify, erase and erase 
verify (erasing). 
6. Program and erase durations are measured to completion (SR.? = 1). Vpp should be held at VPPHuntil determination of 
program/erase success (SR.3/4/5 = 0). 
? For boot block programming and erasure, RPI 
should be held at VHH until determination of program/erase success 


(SR.3/4/5 
= 0). 


8. Alternate boot block access method. 
9. Erase/Program Cycles on extended temperature products is 10,000 cycles. 


28FOO1BX-120 
28FOO1BX·150 


Parameter 
Notes 
Unit 


Min 
Typ(1) 
Max 
Mln 
Typ(1) 
Max 


Boot Block Erase Time 
2 
2.10 
14.9 
2.10 
14.9 
See 


Boot Block Program Time 
2 
0.15 
0.52 
0.15 
0.52 
See 


Parameter 
Block Erase Time 
2 
2.10 
14.6 
2.10 
14.6 
See 


Parameter 
Block Program Time 
2 
0.07 
0.26 
0.07 
0.26 
See 


Main Block Erase Time 
2 
3.80 
20.9 
3.80 
20.9 
See 


Main Block Program Time 
2 
2.10 
7.34 
2.10 
7.34 
See 


Chip Erase Time 
2 
10.10 
65 
10.10 
65 
See 


Chip Program Time 
2 
2.39 
8.38 
2.39 
8.38 
See 


NOTES: 
1. 2S'C. 12.0 Vpp. 
2. Excludes 
System-Level 
Overhead. 
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Vee 
POWER-UP 


0\ 
STANDBY 


V,H 


ADDRESSES 
(A) 


Vil 


V,H 


CEO 
(E) 


Vil 


V,H 


OE" 
(G) 


Vil 


V,H 


WE" 
(w) 


V'L 


WRITE 


VALID 
ADDRESS 
0\ 
DATA 
(PROGRAM) 


OR 
ERASE 
CONfiRM 
COMMAND 


VHH 


RP" 
(p) 
6.5V 


V,H 


V'L 


VpPH 


Vpp 
(V) 
VpPL 


V,H 


V'L 
I 


_. 
€: 


WRITE 
VALID ADDRESS AND DATA (PROGRA~) 


OR ERASE CONnR~ 
CO~~AND 


intel~ 


VHHi;G JJ 


OE# 
(G) 
V1H 
:~ 


V1L 


WE# (W) 


V1H 


V1L 


---- 
•••{••__ 
~_N__ H 
)-------\5 
{VALID 
r- 


SR DATA 
-- 


Versions 
I 
Vcc 
± 10% 
28F001BX·120 
28F001BX·150 
Unit 
Symbol 
Parameter 
Notes 
Mln 
Max 
Mln 
Max 


tAVAV 
twc 
Write Cycle Time 
120 
150 
ns 


tpHEL 
tps 
RP II High Recovery 
to CE II Going Low 
2 
480 
480 
ns 


tWLEL 
tws 
WEll 
Setup to CEil 
Going low 
0 
0 
ns 


tELEH 
tep 
CE II Pulse Width 
70 
70 
ns 


tpHHEH 
tpHS 
RPII 
VHH Setup to CEil 
Going High 
2 
100 
100 
ns 


tVPEH 
tvps 
Vpp Setup to CEil 
Going High 
2 
100 
100 
ns 


tAVEH 
tAS 
Address 
Setup to CE II Going High 
3 
50 
50 
ns 


tDvEH 
tDS 
Data Setup to CE II Going High 
4 
50 
50 
ns 


tEHDX 
tDH 
Data Hold from CE II High 
10 
10 
ns 


tEHAX 
tAH 
Address 
Hold from CE II High 
15 
15 
ns 


tEHWH 
tWH 
WEll 
Hold from CEil 
High 
0 
0 
ns 


tEHEL 
tEPH 
CE II Pulse Width High 
25 
25 
ns 


tEHOV1 
Duration of Programming 
Operation 
5,6 
15 
15 
I-l-s 


tEHOV2 
Duration of Erase Operation 
(Boot) 
5,6 
1.3 
1.3 
see 


tEHOV3 
Duration of Erase Operation 
(Parameter) 
5,6 
1.3 
1.3 
see 


tEHOV4 
Duration of Erase Operation 
(Main) 
5,6 
3.0 
3.0 
see 


tEHGL 
Write Recovery 
before Read 
0 
0 
I-l-s 


taWL 
tVPH 
Vpp Hold from Valid SRD 
2,5 
0 
0 
ns 


taVPH 
tpHH 
RPII 
VHH Hold from Valid SRD 
2,6 
0 
0 
ns 


tpHBR 
Boot-Block 
Relock Delay 
2 
100 
10 
ns 


Versions 
I 
Vcc 
±10% 
28F001BX·120 
28F001BX·150 
Unit 
Symbol 
Parameter 
Notes 
Min 
Max 
Min 
Max 


~HHEL 
OE II VHH Setup to CE II Going Low 
2,7 
480 
480 
ns 


tEHGH 
OEII 
VHH Hold from CEil 
High 
2,7 
480 
480 
ns 


NOTES: 
1. Chip-Enable Controlled Writes: Write operations are driven by the valid combination of CE# and WE#. In systems where 
CE# defines the write pulse width (within a longer WE# timing waveform), all set-up, hold and inactive WE# times should 
be measured relative to the CE# waveform. 
2. Sampled, not 100% tested. 
3. Refer to Table 3 for valid AIN for byte programming or block erasure. 
4. Refer to Table 3 for valid DINfor byte programming or block erasure. 
5. Program and erase durations are measured to completion (SR.7 = 1). Vpp should be held at VPPHuntil determination of 
program/erase success (SR.3/4/5 = 0). 
6. For boot block programming and erasure, RP# should be held at VHH until determination of program/erase success 
(SR.3/4/5 
= 0). 
7. Alternate boot block access method. 
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VHH 
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(p) 
6.5V 


V,H 


V'L 


VpPH 


Vpp 
(V) 
VpPL 


V,H 


V'L 


WRITE 


VALID 
AODRESS 
~ 
DATA 
(PRoORA") 


OR ERASE 
CoNrlR" 
Co""AND 


~ 


ACKAGE 
E 
STANDARD 
32 
LEAD 
TSOP 


N 
32 
LEAD PLCC 
P 
32-PIN 
PLASTIC 
DIP 


TEt.4PERATURE 
RANGE 


T = EXTENDED (-4DOC 
to +8S0C) 


BLANK = COt.4t.4ERCIAL(OOC 
to +7DOC) l 


~CESS 
SPEED (ns) 


120 ns 
150 ns 


T 
TOP BOOT DEVICE 
B 
BOTTOt.4 BOOT DEVICE 


VALID 
COMBINATIONS: 


E2BF001BX·T120 
N2BF001BX-T120 
P2BF001BX-T120 
E2BF001BX·T150 
N2BF001BX·T150 
P2BF001BX-T150 
TE2BF001BX·T150 
TN2BF001BX·T150 


E2BF001BX·B120 
N2BF001BX-B120 
P2BF001BX·B120 
E2BF001BX·B150 
N2BF001BX·B150 
P2BF001BX-B150 
TE2BF001BX·B150 
TN2BF001BX-B150 


Order 
Number 
294005 


Order 
Number 
292046 
"ETOX 
II Flash Memory 
Technology" 


"ETOX 
II Flash Memory 
Reliability 
Data Summary" 


"Using 
Flash Memory for In- 


System Reprogrammable 
Nonvolatile 
Storage" 


"Designing 
an Updatable 
BIOS 


Using Flash Memory" 


Number 
Description 


-004 
Removed 
Preliminary 
classification. 


Latched 
address A16 in Figure 5. 


Updated 
Boot Block Program and Erase section: 
"If boot block program 
or erase is attempted 


while RP"" is at VIH, either the Program 
Status or Erase Status bit will be set to "1", 


reflective 
of the operation 
being attempted 
and Indicating 
boot block lock." 


Updated 
Figure 11, 28F001 BX Erase Suspend/Resume 
Flowchart 


Added DC Characteristics 
typical current values 


Combined 
Vpp Standby 
current and Vpp Read current into one Vpp Standby current spec with 


two test conditions 
(DC Characteristics 
table) 


Added maximum 
program/erase 
times to Erase and Programming 
Performance 
table. 


Added Figures 13-16 


Added Extended 
Temperature 
proliferations 


-005 
PWD changed 
to RP"" for JEDEC standardization 
compatibility 


Revised symbols, 
Le.; CE, DE, etc. to CE"" , DE"", 
etc. 
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As PC computing platforms increase in complexity, so 
does the associated BIOS code. Sophisticated hardware 
and BIOS software increase the potential for revisions. 
Time-to-market goals require faster completion of de- 
signs from conception to production, leaving less time 
for new-peripheral 
BIOS support. 
As an example, 


many 80286-based PC/A Ts lack BIOS support 
for 
31'.· 
floppy drives! Once a computer is out the door, 


code revisions are far more difficult and costly. Code 
revisions with EPROM require either a service call or 
sending EPROMs to the end user, assuming nothing 
else goes wrong in the process. The alternative to BIOS 
update is a prematurely obsolete system, unable to sup- 
port new industry standards and peripheral systems. 


Flash memory offers the same nonvolatile storage as 
EPR9M, 
but additionally offers in-system write capa- 
bility. Using Intel's 28FoolBX for BIOS storage, code 
updates are done quickly in the factory during test and 
debug, while allowing cost-effective field updates to end 
users via floppy disks or modem BBS. 


This application note describes various methods of im- 
plementing a flash memory BIOS using the 28FooIBX. 
Design targets are both laptop and desktop systems. 
The primary emphasis is on application of flash memo- 
ry for BIOS and ROM executable software applica- 
tions. Detailed 28FoolBX information is covered in the 
datasheet, available through your local sales office. 


This section provides a brief overview of Intel's Flash 
Memory and in particular, Intel's 28FoolBX blocked 
flash memory family. It covers the following: 
• Flash memory's EPROM roots 
• Program and Erase Automation 
• Blocked Architecture 


• Deep Powerdown Mode 
• Pinouts, physical layout and upgrade for different 


packages 


• Vpp specifications 


Major features of the 28FooIBX are in-system write, 
selective 
block 
erase, 
program/erase 
automation, 
SRAM-like command interface, deep powerdown capa- 
bility, fixed Vcc and Vpp supplies and hardware lock- 
out protection. 


2.1 
EPROM Roots; Review of Flash 
Process vs EPROM & EEPROM 


Intel's ETOX II (EPROM Tunnel OXide) flash memo- 
ry 
is a single-transistor 
cell providing 
nonvolatile 


trically erasing all data bits in parallel, then r~ndo;ly 
programming data into any byte in the array. The pro- 
gramming operation is achieved via channel hot elec- 
tron injection (CHE), just like EPROMs. Flash electri- 
cal erasure, however, is accomplished through Fowler- 
Nordheim (FN) tunneling. Using separate program and 
erase methods (CHE vs. FN Tunneling), in different 
cell locations, drain vs. source, permits process opti- 
mization for high cycling endurance-the 
number of 


complete erase and re-writes. Traditional 
low-density 


EEPROMs tunnel through the same memory cell junc- 
tion 
for both 
programming 
and 
erasure. 
Because 


EEPROMs erase before programming each byte, these 
processes must occur very fast. Therefore, internal volt- 
ages used to program 
or erase 5V-only EEPROM 


memory cells are high (e.g., l8V -30Y). The combina- 
tion of higher voltage with programming and erasing 
through the same junction contributes to EEPROM's 
oxide breakdown, poor data retention and reduced cy- 
cling capability. 


Intel's flash memory erasure (tunneling) voltage is be- 
low the critical oxide breakdown voltage. By using 
block erasure instead of EEPROM's byte erasure, erase 
times are relaxed, reducing tunneling voltages. Pro- 
gramming Intel's Flash Memory is non-destructive to 
the floating gate oxide compared to EEPROM's use of 
tunneling for programming. These features for erase 
and programming provide Intel's Flash Memory with 
the highest endurance 
(typically over lOOK cycles) 


compared to that of traditional EEPROM cycling. Fur- 
thermore, flash memory exhibits lower failure rates at 
any given cycle count. 


The 
28FoolBX 
integrates 
a Write 
State Machine 


(WSM) on-chip to internally implement program and 
erase algorithms. Operations are initiated through com- 
mand sequence writes to the Command Register, and 
progress is reported back to the user through Status 
Register bits. Software timers are no longer required, as 
timing is now regulated through the on-chip oscillator. 
System software requirements are decreased in compar- 
ison to past algorithms, minimizing overhead and de- 
velopment effort, and allowing code execution and in- 
terrupt servicing while simultaneously programming or 
erasing the device. 


The Erase Suspend command halts block erase to exe- 
cute code or read data from any other block. This fea- 
ture gives the system the capability to service higher 
level interrupts requiring data from the 28FoolBX dur- 
ing the erase interval. After issuing the Erase Resume 
command, the WSM continues erase where it left off 
when suspended. 
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The 28FOOIBX family combines the safety of a hard- 
ware-protected 8 Kbyte "boot" block with the flexibili- 
ty 
of two 
4 Kbyte 
"parameter" 
blocks 
and 
one 


112 Kbyte main block. Each block can be individually 
erased and programmed without affecting code stored 
in another 
block, ensuring data integrity. The boot 


block is intended to contain secure code which mini- 
mally will bring up the system and download code to 
the other blocks of the 28FOOIBX if required. Once 
programmed, it is hardware-locked from further altera- 
tion, guaranteeing true non-volatility. 


The 28FOOIBX-T's lockable block location provides 
compatibility with microprocessors and microcontrol- 
lers that boot from the top of the memory map, such as 
many 
of Intel's 
microprocessor 
families. The 
seg- 


mentation of the 28FOOIBX-B is identical. Its lockable 
block location provides compatibility with microproc- 
essors that boot from low memory, such as Motorola 
and AMD products. See Figure 1 for illustrations of the 
two memory maps available in the 28FOOIBX family. 


The two 4 Kbyte parameter blocks have multiple uses 
in BIOS environments. They can be used to back up the 
CMOS setup parameters such as floppy and hard disk 
type, processor speed, system memory size, graphic dis- 
play type and presence of a coprocessor. Today, should 
the system battery fail, the user loses information in 
battery-backed 
SRAM. 
The 
non-volatile 
parameter 


blocks provide the system capability to automatically 
back up and recover this information. Also, EISA sys- 
tems can store software variable information such as 
add-in board addresses, DMA channels and interrupt 
valueslleve1s. 
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Market analysts predict that the high-growth segments 
of the PC industry for the next several years will be in 
the laptop, palmtop and handheld product lines. Power 
management software is becoming an integral part of 
PC system BIOS as manufacturers attempt to squeeze 
the maximum amount of system operation time from 
their battery pack power supplies. A key indicator of 
this trend is Intel's i386™SL microprocessor superset, 
which adds hardware power management to the Intel 
386 architecture and answers the needs of low-power. 
applications. 


The 28FOOlBX family features deep powerdown capa- 
bility and is ideally suited for these same battery-oper- 
ated systems. Powerdown is entered through low volt- 
age on the RP # 
pin. Typical power consumption 


through Vcc in powerdown is 0.25 }J.W, regardless of 
power supply voltages and activity on the external bus. 
Once BIOS is shadowed to system DRAM for high- 
speed execution, the 28FOOlBX can be shut down for 
minimal current drain. 


This same pin, with l2V present on it, gates program 
and erase of the boot block. Such a hardware lockout 
preserves the system boot code once initially pro- 
grammed and protects it from inadvertent alteration or 
computer virus compromise. 
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2.5 
28F001BX 
Pinouts, Physical 
Layout and Upgrade 


Plastic Leaded 
Chip Carrier 


Most system designs today require surface mount tech- 
nology (SMT) due to shrinking board real estate and 
portable form factors. PLCC is one SMT component 
that uses as little as 35% of the overall board space 
compared to PDIP. Its small size is attributed to the 
center-to-center lead spacing of 50 mils versus 100 mils, 
as well as its four-sided pinout. The I-lead design allows 
the PLCC to be directly soldered to the circuit board. 
Most SMT manufacturing equipment can easily handle 
the PLCe's 50-mil lead pitch. PLCC SMT sockets such 
as that offered by AMP (pIN 821977-1) have an identi- 
cal foot-print for 32-pin devices. Such sockets can be 
used in place of directly soldering a PLCC for proto- 
type build and code testing. Once the reprogramming 
code is tested and debugged, flash PLCCs can then be 
surface-mounted without socketing during production 
runs. 


Intel's 28FooIBX is offered in three standard 32-pin 
packages: Plastic Dual In-line Package (PDIP), Plastic 
Leaded Chip Carrier (PLCe), and Thin Small Outline 
Package (TSOP). All three pinouts provide backward 
compatibility with Intel's 28FOlO bulk-erase flash. See 
Figures 2, 3, and 4 for pinout details. 


PDIPs with sockets provide an excellent way to proto- 
type and debug new designs. The 28FOOIBX is back- 
ward pin-compatible with 1 Mbit standard flash and 
EPROMs. 
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Figure 4. 28F001BX 
TSOP Lead Configuration 


TSOP is the package of choice for hand-held equipment 
or palmtopllaptop 
computers. These compact systems 


require minimal height and area for all components, for 
which TSOP excels. TSOP height measures 1.2mm ver- 
sus 3.5mm for PLCC. TSOP area is 8mm x 20mm com- 
pared to PLCC's 
11.43mm x 13.97mm. Therefore, 
TSOP has significantly less total volume: TSOP 
= 


172.8mm3, while PLCC = 
656.3mm3, and DIP = 


1872.3mm3. State-of-the-art center-to-center 
terminal 


spacing of 20 mils yields a smaller package with nar- 
rower conductor traces than PLCC or PDIP. Location 


1~Vl' to oe route<1 underneath 
the crop, re<1ucmg 


board layers. TSOP for the 28FOOIBX is available in 
the standard (E) pin configuration. For multiple chip 
flash systems, Intel's bulk-erase 28FOIO flash memory 
is available in both standard (E) and reverse (F) pin 
configurations (see Figure 5) allowing components to 
be laid out end-to-end and side-to-side for highest 
board density (see Figure 6). Note how pins 32-17 on 
the standard pinout match pins 1-16 on the reverse 
pinout, and how pins 1-16 
on the standard 
pinout 


match pins 32-17 on the reverse pinouts. 
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Figure 5. 28F010 Standard 
and Reverse 
TSOP Lead Configurations 
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Figure 6. 28F001BX 
and 28F010's 
In Serpentine 
Layout 
Using TSOPs 


ble exceptions to this are laptop and/or palmtop PCs. 
Some of these require 5V-only designs, in which case 
5V is charge-pumped to 12V. It is essential to use the 
specified Vpp when programming and erasing flash. 
Once the commands to program or erase are issued, the 
deviceinternally derives the required voltage references 
from the Vpp supply. Therefore, an improper Vpp level 
degrades the performance of the part. 


Flash memories, like EPROMs, require a 12V pro- 
gramming power supply. Unlike EPROMs, however, 
the Vpp for flash memory is a fixed, standard I~vel. 
When 
combined 
with 
the 
Command 
RegIster 
erase/program control, Intel flash memories use a si~- 
pie, SRAM-like hardware interface with standard mI- 
croprocessor timings. 


Intel's 
Flash 
Memory Vpp specification is 
12.0V 
±O.6V (5%), compatible with most off-the-shelf sys- 
tem power supplies. The IBM PC technical reference 
manual specifiesthe 12Vpower supply at 12.0V, + 5% 
and -4%. 
Additionally, some hard and floppy drives 
require 12V ± 5%. Therefore, most PC power suppli~ 
have 12Vsupplies with ± 5% or better tolerance. POSSI- 


The Write State Machine automatically monitors the 
voltage present on the Vpp pin, beginning when pro- 
gram or erase setup commands are issued and continu- 
ing throughout the internal algorithm interval. If low 
Vpp is detected, the WSM automatically aborts the 
program or erase attempt and reports an improper volt- 
age error to the user through the Status Register. The 
hardware design section discusses various methods of 
Vpp generator if your 12Vpower supply does not meet 
the proper tolerances or 12Vis not available. 


RP#, Vcc and Vpp Lockout Protection 


The RP# 
(Resert/Powerdown) 
pin provides hardware 


write protection for 28FOOIBX flash memories. Until 
this pin transitions to TIL-level VIH, write attempts to 
the device Command Register are ignored, regardless 
of power supply levels or activity on the system bus and 
control inputs. Typically, the system designer will gate 
this signal with a system POWER GOOD indicator 
output to ensure system stability before memory access- 
es begin. 


The 28FOOIBX family provides additional protection 
for designs that tie 12V directly to the device. Since the 
12V supply is less capacitively loaded than the 5V sup- 
ply, the 12V power supply reaches full value faster dur- 
ing power-on. If Command Register lockout protection 
was not provided, a finite possibility exists that inadver- 
tent writes may occur during power-on. For this case, 
Intel's 28FOOIBX flash memory supplies Command 
Register lockout protection when VCC is below 2.5V, 
preventing writes to flash memory from occurring. 
Since CMOS logic is valid at 2.0V, a O.5V margin of 
protection exists, providing extra time for control sig- 
nals to settle before the Command Register is activated. 
Program/erase 
inhibit is guaranteed with Vpp below 
6.5V, with corresponding Vpp low reported through 
the Status Register. Once Vcc reaches 2.5V, the Com- 
mand Register begins processing valid commands, and 
program/erase 
attempts may initiate with Vpp greater 
than 6.5V. At this point, the system is responsible for 
write control. 


When the 28FOOIBX Vcc powers up, or after the RP # 
pin transitions to VIL and back to VIH, the Command 
Register is automatically 
initialized to Read Array 
mode. 


82360SL 
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3.0 
HARDWARE DESIGN 
CONSIDERATIONS 


The system level hardware 
requirements 
for imple- 
menting BIOS and application storage in flash are: 


• Write Enable available to all of the flash memory 
• 
12V routed to flash location or generated on-board 
• CMOS control-signal interface, or RP# 
gated by a 
power-good signal 


• Data buffer or transceiver that works in both write 
and read directions 


• Space in memory map allocated for each applica- 


tion's size 


Intel's i386SL microprocessor superset was chosen for 
the design example, shown in Figure 7. The Intel386SL 
microprocessor superset integrates all major compo- 
nents of a InteJ386 based design on two chips, including 
bus memory, cache controllers and the ISA peripheral 
subsystem. Additionally, it consolidates hardware pow- 
er management for battery-operated 
designs such as 
laptop, handheld and palmtop computers. 


Note the clean interface between the superset and 
28FOOIBX-T. Flash memory was comprehended early • 
in the design of the InteJ386SL microprocessor super- 
~ 
set, to ensure a minimal-chip interface. Transceivers for 
the system bus, as well as a flash memory CE# signal, 
are integrated on the InteJ386SL. 
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The RP IF pin is gated by a power good signal to ensure 
control logic integrity before writes to the 28FOO1BX-T 
are allowed. It is also gated by System Reset, to abort 
program or erase if required for CPU reboot, and by a 
separate General Purpose Input-Output (GPIO) line to 
power down the device once BIOS is shadowed to 
RAM. CMOS logic will guarantee lowest power dissi- 
pation. 


Similarly, system l2V is gated both by System Reset 
and a GPIO 
line. Software can switch 12V to the 
28FOO1BX-T only when programming or erasing it, 
minimizing system power consumption. Vpp genera- 
tion and switching methods are discussed in Section 
3.3. 


Application code, assuming a ROM in the BIOS sock- 
et, is sometimes designed to write to BIOS locations to 
generate software timing delays (versus using NOPs). 
Gating WR IF to the flash memory with a GPIO line 
disables writes until desired by BIOS update software. 


3.1 
BIOS Boot Code Requirements 
and System Configurations 


The previous design assumed that shadow RAM was 
available in the system. Referencing Figure 8, we see 
that the BIOS is actually stored in the main block of the 
28FOOIBX, from system address EOOOOH-FBFFFH. 
In this scenario, the processor jump vectors, BIOS 
checksum and recovery code are stored in the 8 Kbyte 
boot block. This is the area the processor will jump to 
on powerup or after reset. The boot block code will 
execute a checksum check of the main block for a valid 
BIOS. If successful, the processor will check system 
RAM, 
copy the main block code to high memory 


DRAM and jump to this area for the remainder of 
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Power On Self Test (POST), as well as further BIOS 
calls. Optionally, the 28FOO1BXcan then be disabled 
for power savings. 


If BIOS checksum determines an invalid BIOS, the sys- 
tem RAM and floppy drive (or possibly modem) are 
initialized using the boot block recovery code. The sys- 
tem 
requests 
(through 
screen 
display 
or 
speaker 


"beeps") that the user install the BIOS update floppy 
disk. A search of the floppy disk is made for a specific 
file name, and once found, update code is used to re-ini- 
tialize the main BIOS block. System reboot restores 
normal operation. Alternatively, 
the BIOS recovery 


code can contain specific, non-DOS sector/track 
infor- 


mation pertaining to the location of the new BIOS up- 
date file. Thus, the file is protected and not readable to 
basic DOS users. 


If ROM BIOS disable is overriden by system software 
or the user (through setup utility), the design must 
compensate for the altered BIOS location to prevent 
BIOS calls jumping to incorrect code locations. The 
following two methods provide alternative solutions for 
the system designer. 


In this scenario, after BIOS initialization is complete, a 
write to a latch, register or flip-flop shifts addresses for 
future BIOS code fetches by 16 Kbytes. This allows the 
system to correctly access the main block and bypass 
parameter and boot blocks. A system reset or loss of 
power clears this latch, allowing booting from the boot 
block once again. Figure 9 shows the input and output 
signals required for a /LPLD address shifter. It shifts 
addresses in the range FFFFFH-E4000H 
(112 Kbytes) 


to FBFFFH-EOOOOH. 
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Figure 10 presents an alternative approach to configur- 
ing the 28FOOIBX in the system memory map. Simple 
inversion of address line A16 to the 28FOOIBX moves 
the boot block to the lower half of flash memory as seen 
by the system. In normal operation, the processor boots 
and executes from the main array areas, which store the 
system BIOS, video BIOS and/or DOS in ROM. 
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If power loss aborts a BIOS update, the main array 
block will be partially programmed/erased 
and the 


code in this block unusable. The system will "hang" or 
not boot at all. To boot from the boot recovery block, 
restore address A16 polarity, producing the memory 
map shown in Figure II. A keyboard sequence, switch 
on the back of the PC or jumper on the motherboard 
can toggle A16 restore logic and "un-invert" it. After 
reconfiguration, 
the processor boots from the boot 


block and executes its recovery algorithm to restore 
main array block contents. Re-inverting A16 reinstates 
normal system bootup and operation. 
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FDFFF 
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Since standard BIOS code does not support boot block 
recovery, your BIOS software engineers must design 
the recovery code for the 8 Kbyte block. See Section 4.6 
for a flowchart of an example recovery algorithm. 
Third-party 
BIOS vendors, working with Intel, have 


also developed recovery code for the 28FOOIBX (see 
Appendix C). With the exception of this recovery sec- 
tion, the rest of the BIOS remains the same. 
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For flash BIOS designs, the l2V Vpp can be provided 
by: 
1. Using the existing l2V supply from PC Power Sup- 


ply, or 


2. Generating 
l2V using a charge pump or DC-DC 
converter from the 5V supply. 


Flash typically requires only 10 mA for program or 
erase (30 mA max); otherwise only 10 /loAis drawn in 
standby mode, and 0.8 /loAin deep powerdown mode. 


As stated earlier, the IBM PC technical reference man- 
ual specifies the l2V supply as + 5% and -4%, 
which 
meets the Intel Flash Memory Vpp requirement. If 
your power supply meets this condition and has CMOS 
logic, l2V from the PC power supply can be tied direct- 
ly to flash memory, eliminating the need to add extra 


Vcc 


74F125 


PR 
10 DATA 
LINE 
Q 


74F74 


270K 
VppENN 
ClK 
Q 
MEMWR# 
Cl 


................... 
":/ 
'rr 
b•..•.• 
·.....••.•..•. 
""•..•· •...•.•.•••.•.•• 
y ......•.•.•....•........••................•.•... 


RP#, Vcc and Vpp write lockout protection offered in 
the 28FOOlBX. 


If your system does not provide l2V or does not meet 
flash memory specifications, several 5-to-l2V convert- 
ers are available, including surface-mount versions. Ap- 
plication Note AP-3l6, available from your local Intel 
Sales Office, lists several Vpp solutions which offer 
on/off control of Vpp and provide a steady Vpp rise 
and little overshoot. Figure 12 shows one example. On 
power-up, system reset or when Vcc is below 4.5V, 
Vpp is forced off. It is enabled (or disabled) by writing 
to the VppEN # I/O port address. On/ofT capability is 
essential for battery-operated equipment and eliminates 
the need for WE# 
filtering. The VppEN# 
signal 


"OR'ed" with the system memory write (MEMWR#) 
functions as the clock signal for the 74FC74 D-flip- 
flop. The D-input is latched when MEMWR # goes 
high. Writing a one or a zero turns Vpp on or off, 
respectively. 


Vpp 


(12V.200mA) 
T lOOI'F 


GND 


Linear Technology's LTlO72, a switching regulator, is 
used as a 5V to 12V charge pump. The 1O.7K and 
1.24K resistors are used to establish the correct refer- 
ence voltage to obtain 12V.The 100 J.LF capacitor at the 
output can handle up to 200 mA. For a single- or dou- 
ble-chip BIOS design, this capacitor 
value can be 
halved or even quartered to allow selection of a SMT 
capacitor value, since the maximum Ipp current per 
device is only 30 mA (10 mA typical). Allow sufficient 
time when switching Vpp on, letting the charge pump 
level out and enabling the Command Register to re- 
ceive 
program 
or 
erase 
commands. 
The 
diode, 


MURI20, 
keeps the inductor from absorbing current 
from the charged output capacitor. 


Controlling Vpp provides the benefit of system hard- 
ware security. Beyond this, you can design for even 
higher security levels. The first level could be the design 
of a simple software password routine that would only 
turn on Vpp when a correct password is given. Alterna- 
tively, you can provide a jumper to allow 12V to the 
part for a BIOS update and then return it when repro- 
gramming is finished. The system should check this pin 
to see if the jumper was left in the programming posi- 
tion and remind the user to move it. Unless Vpp is at 
12V, the flash memory contents cannot be changed and 
acts just like ROM. Disabling Vpp until voltages have 
stabilized provides additional power-up protection. 


The Motorola component, MC34064, is an under-volt- 
age sensing circuit that begins functioning when Vcc is 
above IV. Between IV and 4.6V, the RESET# 
output 
is active. This 
(or a system RESET#) 
clears the 
74FC74, keeping Vpp off. Alternatively, 
if you use 
CMOS logic, you could make use of Intel's flash memo- 
ry Vcc and Vpp lockout functions. While VCCis below 
2.5V, the Command 
Register is locked out. Since 
CMOS control logic is active at 2.0V, a 0.5V safety 
margin exists for control logic to settle down before the 
part becomes active. Program and erase attempts are 
inhibited with Vpp below 6.5V. For both CMOS and 
non-CMOS designs (i.e., control logic active at 2.0V), 
gate RP# 
with the power supply's "Power Good" sig- 


nal or the MC34064's RESET# 
output (Figure 13). 


Until RP# transitions to VIR, the part ignores all write 
attempts, regardless of power supply voltages and bus 
activity. 


Vpp Switch Schematic 


12V 


GPIO 


RESET# 
T IO;.F 


292077-11 


For laptops or palmtops, an always-active 12V may not 
provide acceptable power management. For these sys- 
tems, a MOSFET switch will toggle 12V to the flash 
memory, minimizing current draw when not needed. 
Several DC switches exist, but there are a few issues to 
consider in your selection. Choose a switch with low 
"ON" resistance to keep the Vpp voltage within flash 
memory tolerances. The system 
12V power supply 


must be specified to a tighter range to allow for any 
voltage drop through the switch. Allocate an I/O line • 
(Vpp enable) to turn the switch on and off. To handle 
• 
"warm RESETS", the Vpp enable must be gated with 
the system RESET# 
line. The Motorola MTD4P05 is 


one example of a surface-mount switch with low drain- 
source resistance. Assuming a 12V + 5% and - 4% 
supply: 
Rns = 
0.60. 


Ipp = 
30 mA (Worst Case) 


~VSWITCHDrop = (30 mA x 0.60.) = 0.02V, 


< (4%ofVpp 
=)0.48V. 


3.3 
Modifying an Existing 
Motherboard 


If you are modifying an existing motherboard 
design 


for a flash memory BIOS, there are a few things you 
should consider. First, check the logic design to deter- 
mine if WR # is decoded and connected to the BIOS 
EPROM location. Typical motherboard 
logic designs 


do not allow writes to the EPROM locations and treat 
EPROM writes as invalid (e.g., ROMCS# 
not generat- 


ed with MEMWR #). This is overcome by generating 
the BIOS location's WR # externally by either adding 
the necessary discrete logic or adding a 3-to-8 decoder 
(see Figure 14 for an example). In either case, tap into 
the M/IO# 
and WR# 
control lines and configure the 


decoder to provide a logic low for the M "AND" 
WR# 
"AND" BIOS address condition. 
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Secondly, check to see if the BIOS code transceiver or 
buffer for the EPROM location works in both direc- 
tions. The transceiver may need a special BIOS call to 
unlock it in the "write" direction, or you may have to 
reprogram the logic for that portion of your board. If 
your chip set data buffer works only in one direction, a 
transceiver and direction logic must be added to the 
CPU bus to pass data to and from flash memory. 


Your system must also be capable of routing 12Vto the 
BIOS socket for program and erase. Control RP# with 
system RESET# and POWERGOOD (see Section 3.0) 
and optionally provide capability for deep powerdown 
mode via an I/O line. Finally, address inversion or shift 
mechanisms outline in Section 3.1 can optionally be 
added for recovery capability with the 28FOOIBX. 


If your design currently incorporates Intel's 28FOIO 
flash memory, hardware upgrade to the 28FOOIBXis 
simple. Transceiver, BIOS write and Vpp requirements 
will have already been considered in the original design. 
Control RP# 
as described in Section 3.0. Finally, in- 


vert or shift the system addresses as in Section 3.1 if 
BIOS "ROM" access after shadowing to DRAM is an- 
ticipated. 


3.4 
In-System 
Write vs On-Board 
Programming 


When devices are soldered directly to a printed circuit 
board, one of two sources control flash memory repro- 
gramming: 
1. the system's own processor, or 
2. a PROM programmer connected to the board. 


These options are called In-System Write (ISW) and 
On-Board Programming (OBP), respectively. Their re- 
spective benefits are discussed in detail in AP-316. 


With ISW, the system drives the reprogramming pro- 
cess and generates Vpp locally. Under this scenario, the 
board manufacturer will initially program at least the 
boot block in a PROM programmer. This removes the 
need for circuitry on-board to unlock the boot block, 
guaranteeing boot code integrity throughout system 
life. A good design practice for ISW-type designs is to 
socket the first few flash BIOS prototypes. SMT-only 
designs can also socket using PLCC SMT sockets. 
Socketing enables the system designer to easily work 
out any bugs with in-system flash reprogramming by 
allowing the removal of a flash part for external repro- 
gramming in a PROM programmer. Once ISW repro- 
gramming is fully debugged, pre-programmed flash 
parts can be soldered directly to the circuit board with- 
out a socket. All flash memory components are exposed 
to a data-retention bake testing and checked for any 
data loss before shipping. It is extremely unlikely that 
data in a production flash devicecan be corrupted from 
heat by a production-run soldering application. 
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OBP uses an external board programmer to supply Vpp 
and VHH and control the programming process. Cer- 
tain design considerations must be evaluated prior to 
laying out the design. Some manufacturers using TSOP 
may also want to remove a handling step from the man- 
ufacturing process by providing the capability to pro- 
gram flash for the first time after being soldered direct- 
ly onto the circuit board. OBP can accomplish this if 
the design is first laid out correctly to support OBP. 
External circuitry generates voltages needed to unlock 
and program/erase 
the boot block. 


3.5 
Ideas for Using Extra Adaptor 
Space 


Laptop and palmtop systems may have adaptor space 
available in the system memory map since there typi- 
cally isn't much room for add-in boards. Additionally, 
they may not use up the entire 128K of BIOS space due 
to their fixed feature set and limited upgrade capability. 
This extra memory space can hold ROM executable 
programs 
like 
Lotus 
123, WordPerfect, 
Microsoft 
Works, etc. Using Intel's flash TSOPs, a small applica- 
tion cache can reduce a laptop's disk access and in- 
crease battery life. 


Additionally, 
ROM-Executable 
DOS can be placed 


anywhere in adapter 
space. For example, MS-DOS 
ROM Version 3.22 requires 62 KB of adaptor space 
today (this may change on subsequent revisions). One 
location for MS-DOS ROM Version 3.22 is directly un- 


der the BIOS (again see Figure 8). Today's typical 
BIOS consumes 64 KB or less; consequently, both the 
BIOS and MS-DOS ROM Version 3.22 could reside in 
a single 28FOOIBX (128 Kbytes), yielding reduced 
chipcount. However, if power management code is add- 
ed to the BIOS, system BIOS code could grow to 
80 KB or more. Therefore, designs that include both 
power management and MS-DOS ROM Version 3.22 
should consider using both a 28FOOIBX and 28FOlO 
flash device (or two 28FOOlBX's). This leaves extra 
space for BIOS and MS-DOS ROM to grow in the de- 
sign, while providing additional storage for the video 
BIOS. 


4.0 
SOFTWARE 
DESIGN 
CONSIDERATIONS 


Intel's Flash Memory provides a cost-effective, updata- 
ble, nonvolatile code storage medium. The 28FOOIBX 
integrates the Quick-Pulse Programming 
and Quick- 


Erase algorithms of prior Intel Flash Memories on- 
chip, using the Command Register, Status Register and 
Write State Machine (WSM). On-chip integration dra- 
matically reduces system overhead, simplifies system 
software creation and debug and provides SRAM-like 
timings to the Command and Status Registers. WSM 
operation, internal program/erase 
verify and Vpp high 
voltage presence are monitored and reported via appro- 
priate Status Register bits. Table 1 lists the 28FOOIBX 
command set, while Table 2 details the Status Register 
bits and their meanings. 


Bus 
Notes 
First Bus Cycle 
Second 
Bus Cycle 
Command 
Cycles 
Req'd 
1,2 
Operation 
Address 
Data 
Operation 
Address 
Data 


Read Array/Reset 
1 
Write 
X 
FFH 


Intelligent 
Identifier 
3 
1,2,3 
Write 
X 
90H 
Read 
IA 
110 


Read Status Register 
2 
2 
Write 
X 
70H 
Read 
X 
SRD 


Clear Status Register 
1 
Write 
X 
50H 


Erase Setup/Erase 
Confirm 
2 
1 
Write 
SA 
20H 
Write 
SA 
DOH 


Erase Suspend/Erase 
Resume 
2 
Write 
X 
SOH 
Write 
X 
DOH 


Program Setup/Program 
2 
1,2 
Write 
PA 
40H 
Write 
PA 
PO 


NOTES: 
1. IA= IdentifierAddress; OOHfor manufacturercode, 01H for device code. 


SA = Address withinthe blockbeing erased. 
PA = Address of memorylocationto be programmed. 


2. SRD = Data read from Status Register. See Table 2 for a descriptionof StatusRegister bits. 
PD = Data to be programmedat locationPA.Data is latched on the risingedge ofWE ••. 
liD = Data read from intelligentidentifier. 


3. Followingthe intelligentidentifiercommand, two read operations access the manufacturerand device codes. 
4. Commands other than shown above are reserved by Intelfor future device implementationsand should not be used. 
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WSMS 


7 


ESS 


6 


WRITE STATE MACHINE STATUS 
1 = Ready 
0= 
Busy 


ERASE SUSPEND STATUS 
1 = Erase Suspended 
o = Erase In Progress/Completed 
ERASE STATUS 
1 = Error In Block Erase 
o = Successful Block Erase 
PROGRAM STATUS 
1 = Error In Byte Program 
o = Successful Byte Program 
Vpp STATUS 
1 = Vpp Low Detect; Operation Abort 
0= 
Vpp OK 


VPPS 
3 


NOTES: 
The Write State 
Machines Status Bit must first 
be 


checked to determine program or erase completion, be- 
fore the Program or Erase Status bits are checked for 
success. 
If the Program AND Erase Status bits are set to 1's dur- 
ing an erase attempt, an improper command sequence 
was entered. Attempt the operation again. 
If Vpp low status is detected, the Status Register must be 
cleared before another program or erase operation is at- 
tempted. 
The Vpp Status bit, unlike an A/D converter, does not 
provide continuous indication of Vpp level. The WSM in- 
terrogates the Vpp level only after the program or erase 
command sequences have been entered and informs the 
system if Vpp has not been switched on. The Vpp Status 
bit is not guaranteed to report accurate feedback be- 
tween VPPLand VPPH. 


SR.2-SR.O = RESERVED FOR FUTURE ENHANCEMENTS 
These bits are reserved for future use and should be masked out when polling the Status Register. 


The WSM on-chip oscillator internally times the pro- 
gram/erase algorithms, making software timers unnec- 
essary. Block precondition is also controlled by the 
WSM as part of the erase algorithm. Block data pro- 
gramming to "O's" before erasing is no longer needed. 


Intel's high quality design, manufacturing and testing 
result 
in 
outstanding 
reliability and 
performance 


throughout device life. Although Program Status and 
Erase Status bits are provided for Status Register com- 
pleteness, errors will probably not be encountered, if 
proper Vpp levels and software sequences are imple- 
mented. 


Intel offers standard software drivers, written in "C", 
to assist software engineers implementing 28FOOIBX 
reprogramming for update utilities. These high-level 
routines, found in Appendix A, are adaptable to a wide 
range of floPand floCplatforms and system architec- 
tures. 


Covered in this section are the major software steps for 
a flash BIOS update utility: 
• Update software for a modified system 
• Pseudo-Code overview 


• Initializing the system 
• Code loader routine 
• Flash re-programming 
• Recovery routines 
• Power management 


4.1 
Update Software 
for a Modified 
System 


The design example of Section 3.0 assumes BIOS shad- 
owing for BIOS code execution while allowing BIOS 
writes to the flash socket. Many systems provide a reg- 
ister which enables BIOS writes and reads. Some sys- 
tems may not allow BIOS reads from RAM while per- 
forming BIOS writes to the flash socket, or vice versa. 
The reasons may be simple; no shadow RAM exists in 
the system (8088 or 8086 systems), or system logic 
treats "ROM writes" as an invalid operation. In these 
cases, perform all your required BIOS calls before you 
erase and program the flash memory. But keep in mind, 
to update the user on the progress of flash program- 
ming and indicate when programming is finished, you 
should add some basic screen or speaker "beep" rou- 
tines to your update utility. 


The following pseudo-code for an update utility pro- 
vides a brief description of the process of updating a 
BIOS in-situ. It is based on software developed by a 
customer for a PC platform with BIOS update capabili- 
ty. This Intel386-33 MHz system uses the 28FooIBX 
for BIOS storage. Modify the flowchart below, if need- 
ed, for your particular chipset and hardware environ- 
ment. 


Initialize system (set up user screen, check battery pow- 
er, check device ID) 


Get BIOS file options (from floppy or modem) 
If no file present 
Send error message to insert BIOS update flop- 
py, or press ESC to exit 


Display BIOS update files, prompt user for choice and 
load to memory 
If file invalid, 
Prompt for file or exit 


Inform user what is about to happen, with option to 
continue or exit 
If user continues, inform them to not turn off the 
power or soft-reboot (CNTL-ALT-DEL) 


Erase 28FooIBX main/parameter 
blocks 
If system interrupt occurs 
Suspend erase if flash memory access is required 
Resume Erase 


Write filers] into flash memory 
Indicate to user that flash reprogramming is over 
Reboot the system 


If your application is a laptop or palmtop computer, 
first check the battery to make sure there is enough 
power to do the update. If not, inform the user to re- 
charge the system before continuing the update and exit 
the update program. This ensures that the system won't 
stop in the middle of an update. Next, initialize access 
to flash for reads and writes, then try reading the device 
ID through the Command Register. Checking the de- 
vice ID before programming or erasing helps determine 
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memory in the system matches your code before start- 
ing to reprogram the part. The manufacturer 
ID for 
Intel flash memories is 89H (10001001), located at de- 
vice address OOOOOH.Device IDs are located at address 
OOOOIH; the 
ID 
for 
the 
28FooIBX-T 
is 
94H 
(10010100), and the 28FooIBX-B device ID is 95H 
(10010101). These device addresses, in the DOS memo- 
ry map, correspond to system addresses EOOOOH(mfgr. 
ID) and EOOOIH(device ID). If A16 inversion is used 
as described in Section 3.1, system addresses for mfgr. 
ID and device ID under normal operation are FOOOOH 
and FOOOIH. 


NOTE: 
During the initialization, you can also perform a scan 
of the adaptor space to ascertain if there is more flash 
in the system. Other Intel Flash Memories share com- 
mon manufacturer 
IDs but have unique device IDs, 
listed below: 


Device 
Device 
Device ID 
ID (Hex) 
(Binary) 


2BF256A 
B9H 
10111001 
2BF512 
BBH 
10111000 
2BF010 
B4H 
10110100 
2BF020 
BOH 
10111101 
2BF001BX-T 
94H 
10010100 
2BF001BX-B 
95H 
10010101 


The update utility described in the previous section 
provides an optional mouse-driven color graphical user 
interface (GUI) and allows not only BIOS update to 
the main block but also update of the parameter blocks, 
and copy/compare of block data to a DOS file. These 
types of features convey to the end user the ease and 
simplicity of performing a BIOS update. For example, 
the main block update utility lists all possible BIOS 
files in the selected drive and directory, and prompts 
the user for the desired file. System OEMs may want to 
encode a specific BIOS ftle name into the generic loader 
utility ".COM" or ".EXE" file. This allows automatic 
reading of the new BIOS file into a program buffer, 
bypassing the user prompt. 


Once the file is loaded into RAM, the routine informs 
the user of the impending BIOS update and provides 
the option to exit if desired. If continued, it warns the 
user to not turn off power or reboot during the BIOS 
update procedure. It then erases and reprograms the 
main block with new BIOS data, notifies the user of 
successful update and reboots. 


The 28FOOIBXsystem erase algorithm is shown in Fig- 
ure 15. Note that the actual device erase algorithm 
(Quick-Erase) is controlled internally, including all tim- 
ing and block preconditioning. This provides the same 
high level of reliability proven on Intel's ETOX II tech- 
nology, while reducing system debug efforts. Erase 
progress is reported to system software thru specific 
Status Register bits. The 28FOOIBX erases all bits of a 
block in paralle1. Minimum and typical erase times for 
each block are listed below: 


Block 
Minimum 
Typical 
Time (Sec) 
Time (Sec) 


Parameter 
(ea.) 
1.3 
2.1 
Main 
3.0 
3.8 
Boot 
1.3 
2.1 


The actual erase time depends on the Vpp voltage level 
(11.4V-12.6V), temperature and the number of erase 
cycles already completed on the part. System software 
must comprehend adequate time for Vpp, after enabled, 
to ramp to l2V before erase is attempted. Capacitors on 
the Vpp bus, in addition to the intrinsic pump nature of 
many l2V solutions, cause an RC ramp. Systems that 
direct-wire l2V need not worry about this delay. 


Erase suspend gives the user the ability, while erasing a 
block of the 28FOOIBX, to read data or execute code 
from another block. This capability, in conjunction 
with the minimal system overhead provided by the 
WSM, makes disabling of interrupts during block erase 
unnecessary. Once given the erase suspend command, 
the WSM halts, reports suspend status to the Status 
Register and allows array reads. When issued erase re- 
sume, it proceeds at the point where it was suspended. 
Figure 16 details the system code flowchart that sus- 
pends and resumes erase. 
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Bus 
Command 
Comments 
Operation 


Write 
Erase 
Data = 20H 


Setup 
Address 
= Within Block 


to be erased 


Write 
Erase 
Data = DOH 


Address 
= Within 
Block 
to be erased 


Read 
Status 
Register 
Data. 


ToggleOE# 
orCE# 
to 


update 
Status 
Register 


Standby 
CheckSR.7 
1 = Ready, 0 = Busy 


Repeat 
for subsequent 
blocks. 


Full status check can be done after each block or after 
a sequence 
of blocks. 


Write FFH after the last block erase operation 
to reset 


the device to Read Array Mode. 


Bus 
Command 
Comments 
Operation 


Standby 
CheckSR.3 
1 = Vpp Low Detect 


Standby 
Check 
SR.4, 5 


Both 1 = Command 
Sequence 
Error 


Standby 
CheckSR.5 


1 = Block Erase Error 


SR.3 MUST be cleared, 
if set during an erase attempt, 


before further 
attempts 
are allowed 
by the Write State 


Machine. 


SR.5 is only cleared 
by the Clear Status 
Register 


Command, 
in cases where multiple 
blocks 
are erased 


before full status is checked. 


If error is detected, 
clear the Status 
Register 
before 


attempting 
retry or other error recovery. 
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Bus 
Command 
Comments 
Operation 


Write 
Erase 
Data = BOH 


Suspend 


Write 
Read 
Data = 70H 


Status 
Register 


Standby/ 
Read Status 
Register 


Read 
CheckSR.7 


1 = Ready, 0 = Busy 
ToggleOE# 
orCE# 


to update 
Status 
Register 


Standby 
CheckSR.6 


1 = Suspended 


Write 
Read Array 
Data = FFH 


Read 
Read array data from 


block other than that 
being erased. 


Write 
Erase Resume 
Data = DOH 


I'US 
Command 
Comments 
Operation 


Write 
Program 
Data = 40H 


Setup 
Address 
= Byte to 


be programmed 


Write 
Program 
Data to be Programmed 


Address 
= Byte to 


be programmed 


Read 
Status 
Register 
Data. 


ToggleOE# 
orCE# 
to 


update 
Status 
Register 


Standby 
CheckSR.7 


1 = Ready, 0 = Busy 


Repeat 
for subsequent 
bytes. 


Full status check can be done after each byte or after 
a sequence 
of bytes. 


Write FFH after the last byte programming 
operation 
to 
reset the device to Read Array Mode. 


Bus 
Command 
Comments 
Operation 


Standby 
CheckSR.3 


1 = Vpp Low Detect 


Standby 
CheckSR.4 


1 = Byte Program 
Error 


SR.3 MUST be cleared, 
if set during a program 


attempt, 
before further 
attempts 
are allowed 
by the 


Write State Machine. 


SR.4 is only cleared 
by the Clear Status 
Register 


Command, 
in cases where multiple 
bytes are 


programmed 
before full status is checked. 


If error is detected, 
clear the Status 
Register 
before 


attempting 
retry or other error recovery. 


On-Chip 
Programming 
Algorithm 


As with 28FOOIBX erase, the Intel flash Quick-Pulse 
algorithm is internally controlled by the WSM. Figure 
17 shows a system software flowchart for the Com- 
mand 
Register/Status 
Register 
interface. 
Minimum 
and typical programming times (per byte) are 15 ","S 
and 18 ","s,respectively. Actual time varies with Vpp, 
temperature 
and cumulative programming 
cycles on 
the device. Ensure that stable 12V is applied to the 
device before attempting byte programming. 


After polling the Status Register and determining that 
the WSM is again READY, 
system software should 
further analyze the Status Register to ensure that pro- 
gram or erase has successfully completed. The WSM 
will return to READY status after program or erase 
command sequences under any of the following condi- 
tions: 
• Program/erase 
completed successfully, 
• Vpp transition below specification during the pro- 
gram/erase attempt, 


• Improper 
sequence of erase setup/confirm 
com- 
mands to the WSM, or 
• Inability to erase the specified block, or program the 
desired byte. 


Figures 15 and 17 detail the additional Status Register 
data analysis to ensure that program or erase have suc- 
cessfully occurred. 


Unsuccessful BIOS update can occur for any of the 
reasons listed below: 
1. Vpp transitions 
out of specified tolerance during 
program or erase. 


2. Incorrect code in the update BIOS disk file, or dam- 
aged BIOS disk. 


3. Loss of system power during program or erase. 
4. System reset (such as reboot) during program or 
erase. 


The Status Register, through bit 3, reports VpPH loss to 
system software. The BIOS update utility can detect 
scenario 1 and recover by simply re-attempting block 
update. 


A checksum of update BIOS code after copy from disk 
to RAM, before flash erase and reprogram, will elimi- 
nate error caused by scenario 2. 


PC motherboard logic should gate the 28FOOlBX RP# 
pin with both POWER GOOD and RESET# 
signals, 


to abort program or erase attempts if either scenario 3 
or 4 were to occur. This allows the processor to execute 
code out of the 8 Kbyte boot block upon system recov- 
ery. System reset or loss of system power will clear the 
Status Register to value 80H, leave the block being up- 
dated partially programmed or erased and reset the 
28FOOlBXto Read Array mode. As detailed previously 
in Section 3.1, a checksum of the main block will alert 
the 
system 
to 
an 
incomplete 
BIOS. 
Recovery 
is 


achieved by the following or similar steps: 


• Initialize CPU and system logic. 
• Initialize the system floppy disk. 
• Prompt the user to insert a BIOS diskette, through 
speaker "beep". 
• Erase and reprogram the main and/or 
parameter 
blocks with file data. 


• Reboot 


Battery-powered 
PCs incorporate 
a variety of tech- 


niques to prolong system life between recharges. Typi- 
cally, power management software senses user inactivi- 
ty and shuts off power-intensive sections of the system. 
Options include: 


• Display powerdown 
• Disklhard drive powerdown 
• System clock slowdown or suspend, and 
• Powerdown of non-volatile circuitry in the system. 


The 28FOOlBX fits the latter description. When the, 
RP# 
pin transitions to GND, the device enters an ul- 
tra-low power mode, typically consuming 0.25 "'"W 
thru Vcc. This technique can also be used to power 
down the BIOS memory after BIOS code has been 
shadowed to DRAM, if available in the system. When 
not programming or erasing the 28FOOIBX, the system 
should shut off 12V Vpp to the part to minimize cur- 
rent draw through this supply. 


User inactivity is typically detected if the keyboard has 
not been used, or the disk drive has not been accessed, 
for a predetermined 
interval (this is often user-pro- 


grammable). Power management software must ensure 
that a BIOS update is not occurring, before powering 
down the 28FOOlBX, to prevent incomplete update. 


For more information 
on power management 
tech- 
niques, consult datasheets and application notes on the 
Inte1386SL microprocessor superset. 


5.1 
Traditional 
BIOS Storage and 
Disadvantages 


Traditional BIOS storage has been in EPROM, which 
offers nonvolatility and factory programming capabili- 
ty. In earlier PCs, the BIOS code was fairly simple (rel- 
ative to today's software) and updates were infrequent, 
so EPROMs or ROMs were an acceptable BIOS stor- 
age medium. Today's systems are much more sophisti- 
cated, 
with 
many 
designs 
supporting 
the 
Intel 
i386/i486™ 
microprocessors and new bus architec- 
tures like MCA and EISA for the first time. These new 
buses allow peripherals to take control of the system 
bus ... it is difficult to guess what new system configu- 
rations might emerge. Therefore, the potential for a 
change in the BIOS code is much greater and the fre- 
quency of change is likely to increase. 


A system designer may use EPROMs for BIOS storage 
to reduce initial system (component) costs, but the 
long-term update cost is much more than the difference 
between EPROM and flash memory components. A 
major manufacturer of PCs has estimated that a service 
call for a BIOS update with EPROMs can cost up- 
wards of $300.00 for ONE update at ONE site. 
EPROMs are also susceptible to bent leads during in- 
sertion by the technician, or more likely, the end user. 
Service is becoming a key differentiator between the 
multitudes of PC makers. Reducing the number of 
times a PC has to be opened for any reason and provid- 
ing improved serviceincreasescustomer confidenceand 
promotes a reliable image. 


Using flash memory for BIOS storage provides a flex- 
ible code medium that allowsthe BIOS code to adapt to 
changing hardware and software conditions. BIOS up- 
dates in flash are inexpensive,via a floppy disk or mo- 
dem. They remove EPROM inventories, reduce pack- 
aging requirements, reduce total postage costs and 
eliminate servicecost for BIOS code updates by remov- 
ing the need for a technician to do the update. A com- 
pany that supports mutiple OEMs can improve version 
management control by using a flash BIOS and floppies 
or a BBS for updates. An additional benefit is that not 
only the BIOS, but DOS itselfcan be stored in the same 
flash memory device. 


5.3 
Advantages 
of Adding DOS in 
FLASH 


Once the requirements for flash memory BIOS are met, 
the capability is also in place for adding DOS in 
FLASH. Why put DOS in FLASH? For laptop and 


palmtop PCs, battery longevity is of paramount con- 
cern, followed closely by weight and increasing user 
RAM (640 KB) space. Extra user RAM is needed for 
applications 
that 
require 
more 
than 
the 
typical 
570 Kbytes (640 KB-70 KB) available with disk-based 
DOS. Digital Research Incorporated and Microsoft 
both make "DOS-in-ROM" 
products that 
address 


these needs. MS-DOSROM version 3.22is an example. 


Microsoft's MS-DOS ROM Version 3.22 is a full-func- 
tion version of MS-DOS 3.2. It features instant-on and 
employs only 15 KB of the 640 KB DOS RAM user 
space, leaving the rest for applications. Since MS-DOS 
ROM Version 3.22 loads from adaptor space, both disk 
access and DOS loadtime are reduced. For laptops, 
anything that can reduce disk access equates to battery 
longevity. Laptops can reduce weight by using MS- 
DOS ROM Version 3.22 and replacing the floppy drive 
with an IC card. Adding MS-DOS ROM Version to 
desktops also liberates additional user RAM for the 
same above reasons, but may not be optimal for high 
speed 32-~it systems. 


All future versions of MS-DOS will be supported with 
equivalent versions of MS-DOS ROM. SeeAppendix B 
for more information. 


5.4 
Advantages 
of Adding 
1 MB-4 MB of Resident Code 
Storage 


There is a growing need for systems to be able to pro- 
vide a small suite of bundled applications. Benefits to 
the user are faster application execution thru reduced 
hard or floppy disk access, no power used to store the 
resident code, and instant-on. No time is wasted trans- 
ferring data over a disk I/O interface. The code is 
instead loaded to RAM with a simple memory copy 
function or procedure. In some cases, code is directly 
executed by the processor. Tandy's Deskmate is an ex- 
ample of such a system. Future versions of Deskmate- 
like user interfaces could easily be made flash-updata- 
ble. SRAM is too expensiveand requires power to just 
store files.Furthermore, battery backup is not a reliable 
means of achievingnonvolatility. Intel's Flash Memory 
can provide user configurability for I MB-4 MB of 
code storage for just 2x-3x the cost of EPROMs and 
less than half the cost of SRAM. Applications such as 
Lotus 123, WordPerfect and Microsoft Works also 
come in either a direct-execute "ROM" version or a 
load-from-ROM format. Many other ROM application 
software packages are in development, servicing the 
successful and growing needs of the laptop/palmtop 
computers. Therefore, if an application can be stored or 
runs from ROM, it can be stored and run from flash. 
As software packages are periodically updated, flash 
memory provides the capability of updating these 
"ROM" applications at little cost to the software ven- 
dor and with no system disassembly required. 


• 
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APPENDIX 
A 
SOFTWARE 
ROUTINES 


/*************************************************************************************/ 
'* 
Copyright 
Intel 
Corporation, 
1991 
*' 
'* 
Brian 
Dipert, 
Intel 
Corporation, 
July 
14, 
1991, 
Revision 
1.4 
*' 
'* 
The 
following 
drivers 
control 
the 
Command 
and 
Status 
Registers 
of 
*' 
'* 
the 
28FOOIBX 
Flash 
Memory 
to drive 
byte 
program, 
block 
erase, 
Status 
*' 
'* 
Register 
read 
and 
clear 
and 
array 
read 
algorithms. 
*' 
'* 
Sample 
Vpp 
and 
RP# 
control 
blocks 
are 
also 
included. 
*' 
'* 
The 
functions 
listed 
below 
are 
included: 
*' 
'* 
erasbgn(): 
Begins 
block 
erasure 
*' 
'* 
erassusp(): 
Suspends 
erase 
to allow 
reading 
data 
from 
a block 
of the 
*' 


/* 
28FOOIBX 
other 
than 
that 
being 
erased 
*' 
'* 
erasres(): 
Resumes 
erase 
if suspended 
*' 
'* 
end() : 
Polls 
the 
Write 
State 
Machine 
to determine 
if block 
erase 
or 
*' 
/* 
byte 
program 
have 
completed 
*' 
'* 
eraschk(): 
Executes 
full 
status 
check 
after 
erase 
completion 
*' 
'* 
progbgn(): 
Begins 
byte 
programming 
*' 
'* 
progchk(): 
Executes 
full 
status 
check 
after 
byte 
program 
completion 
*' 
'* 
idread() : 
Reads 
and 
returns 
the 
manufacturer 
and 
device 
IDs 
of the 
*' 
'* 
target 
28FOOIBX 
*' 
'* 
statrd() : 
Reads 
and 
returns 
the 
contents 
of the 
Status 
Register 
*' 
'* 
statclr(): 
Clears 
the 
Status 
Register 
*' 
'* 
rdmode() : 
Puts 
the 
28FOOIBX 
in Read 
Array 
mode 
*' 
'* 
rdbyte(): 
Reads 
and 
returns 
a specified 
byte 
from 
the 
target 
28FOOIBX 
*' 
'* 
vppup(): 
Enables 
high 
voltage 
Vpph 
*' 
'* 
vppdown (): 
Disables 
Vpph 
*' 
'* 
pwdon(): 
Ramps 
the 
RP# 
pin 
to high 
voltage 
Vhh, 
enabling 
boot 
block 
*' 
'* 
program'erase 
*' 
'* 
pwdoff(): 
Disables 
high 
voltage 
Vhh 
on RP#, 
disabling 
program 
*' 


/* 
and 
erase 
of boot 
block 
*' 


/* 
*' 
'* 
Addresses 
are 
transferred 
to functions 
as pointers 
to 
far 
bytes 
(ie long 
*' 
'* 
integers). 
An 
alternate 
approach 
is to create 
a global 
array 
the 
size 
of the 
*' 
'* 
28FOOIBX 
and 
locate 
'over' 
the 
28FOOIBX 
in the 
system 
memory 
map. 
Accessing 
*' 
'* 
specific 
locations 
of the 
28FOOIBX 
is then 
accomplished 
by passing 
the 
chosen 
*' 
'* 
function 
an offset 
from 
the 
array 
base 
versus 
a specific 
address. 
Different 
*' 
'* 
microprocessor 
architectures 
will 
require 
different 
array 
definitions; 
ie for 
*' 
'* 
the 
Intel 
architecture, 
define 
it as 
'byte 
boot 
[2][10000]' 
and 
pass 
each 
*' 
'* 
function 
TWO 
offsets 
to access 
a specific 
location. 
MCS-51 
architectures 
*' 
'* 
are 
limited 
to 
'byte 
boot[lOOOO]'; 
alternate 
approaches 
such 
as writing 
to 
*' 
'* 
control 
bits 
will 
be required 
to access 
the 
full 
flash 
array 
*' 


'* 
*' 
'* To 
create 
a far pointer, 
a function 
such 
as MK_FP() 
can 
be used, 
given 
*' 
'* 
a segment 
and 
offset 
in the 
Intel 
architecture. 
I use 
Turbo-C; 
see your 
*' 
'* 
compiler 
reference 
manual 
for 
additional 
information. 
*' 


I***********************************~**·**********************************************/ 


/***********************************************************************************/ 
/* 
Revision History: Rev 1.4 
*/ 


/* 
*/ 


/* 
Changes from 1.0 to 1.1: Added typedef for "byte" to accurately reflect 
*/ 
/* 
this x8 device. Altered variable definitions accordingly. Combined 
*/ 
/* 
functions progend() and erasend() into function end(). 
*/ 
/* 
*/ 
/* 
Changes from 1.1 to 1.2: Added this revision history block. Added above 
*/ 
/* 
comments on alternate addressing methods. 
*/ 
/* 
*/ 
/* 
Changes from 1.2 to 1.3: Added pass/fail error return from idread(), 
*/ 
/* 
idread() at beginning of progbgn() and erasbgn(), pass/fail error 
*/ 


/* 
return from progbgn() and erasbgn(). 
*/ 
/* 
*/ 


/* 
Changes from 1.3 to 1.4: Revised code to reflect simplified program and 
*/ 


/* 
erase algorithms. 28F001BX.automatically transitions to Read Status Register 
*/ 


/* 
mode after program command sequence, erase command sequence and remains in 
*/ 
/* 
Read Status Register mode after Erase Suspend is issued. Address OOOOH is no 
*/ 


/* 
longer required to read or clear the Status Register. 
*/ 


/***********************************************************************************/ 


/***********************************************************************************/ 
/* Function: Main 
*/ 
/* Description: Included only to omit errors when attempting to compile code. 
*/ 


./* 
The end customer would insert their main program here. 
*/ 
/***********************************************************************************/ 


main() 


( 
I 


/***********************************************************************************/ 
/* 
Function: Erasgbn 
*/ 


/* 
Description: Begins erase of a block. 
*/ 


/* 
Inputs: blckaddr: System address within the block to be erased 
*/ 


/* 
Outputs: None 
*/ 


/* 
Returns: 0 = Erase successfully initiated 
*/ 


/* 
1 = Erase not initiated (ID check error) 
*/ 
/* 
Device Read Mode on Return: Status Register (ID if returns 1) 
*/ 
/***********************************************************************************/ 


#define ERASETUP 
#define ERASCONF 


OX20 
OXDO 
/* Erase Setup command 
/* Erase Confirm command 


/* blckaddr is an address within the block to be 
/* 
erased 


( 


if (idread()=l) 
return (1); 
*blckaddr = ERASETUP; 
*blckaddr = ERASCONF; 
return (0); 


/* Write Erase Setup command to block address 
/* Write Erase Confirm command to block address 


•• 


/************************************************************************************/ 
/* 
Function: Erassusp 
*/ 


/* 
Description: Suspends block erase to read from another block 
*/ 


/* 
Inputs: None 
*/ 


/* 
Outputs: None 
*/ 


/* 
Returns: 0 = Erase suspended 
*/ 


/* 
1 = Error: Write State Machine not busy (erase suspend not possible) */ 


/* 
Device Read Mode on Return: Read Status Register 
*/ 


/************************************************************************************/ 


#define STATREAD 
#define SYSADDR 


OX70 
o 


( 
byte far *stataddr: 


/* Mask to isolate the WSM Status bit of the 
/* 
Status Register 
/* Status Register value after masking, signifying 
/* 
that the WSM is no longer busy 
/*Mask to isolate the Erase Suspend Status bit of the 
/* 
Status Register 
/* Status Register value after masking, signifying 
/* 
that erase has been suspended 
/* Read Status Register command 
/* This constant can be initialized to any address 
/* 
within the memory map of the target 28F001BX 


/* 
and is alterable depending on the system 


/* 
architecture 
/* Erase Suspend command 


stataddr = (byte far *)SYSADDR: 
*stataddr = SUSPCMD; 
/* Write Erase Suspend command to the device 


*stataddr = STATREAD: 
/* Write Read Status Register command to 28F001BX 


while ((*stataddr& RDYMASK) 
!= WSMRDY) 
/* Will remain in while loop until bit 7 of the 
/* 
Status Register goes to 1, signifying that 


/* 
WSM is no longer busy 


if ((*stataddr& SUSPMASK) __ ESUSPYES) 


return(O): 
/* Erase is suspended ••• return code "0" 
/* Erase has already completed: suspend not possible. 
/* 
Error code "1" 


*/ 
the */ 
*/ 


intel~ 


1**********************************************************************************/ 
'* 
Function: Erasres 
*' 
'* 
Description: Resumes block erase previously suspended 
*' 


'* 
Inputs: None 
*' 
'* 
Outputs: None 
*' 
'* 
Returns: 0 = Erase resumed 
*' 
'* 
1 = Error; Erase not suspended when function called 
*' 
'* 
Device Read Mode on Return: Status Register 
*' 
/****************************************************************.** 
••••••••••••••• 
, 


#define RDYMASK 
OX80 


#define WSMRDY 
OX80 


#define SUSPMASK 
OX40 


#define ESUSPYES 
OX40 


#define STATREAD 
OX70 


#define SYSADDR 
0 


#define RESUMCMD 
OXDO 


int erasres() 


{ 
byte far *stataddr; 


'* Mask to isolate the WSM Status bit of the 
*' 
'* 
Status Register 
*' 
'* Status Register value after masking, signifying 
*' 
/* 
that the WSM is no longer busy 
*' 
'* Mask to isolate the Erase Suspend Status bit 
*' 
'* 
of the Status Register 
*' 
'* Status Register value after masking, signifying 
*' 
'* 
that erase has been suspended 
*' 
'* Read Status Register Command 
*' 
'* This constant can be initialized to any 
*' 
'* 
address within the memory map of the target 
*' 
'* 
28F001BX and is alterable depending on the 
*' 
'* 
system architecture 
*' 
'* Erase Resume Command 
*' 


stataddr 
= (byte far *)SYSADDR, 


*stataddr = STATREAD; 
'* Write Read Status Register command to 28F001BX 
*' 


if ((*stataddr 
&: SUSPMASK) 
!= ESUSPYES) 


return (1); 
'* Erase not suspended, Error code "1" 
*' 


*stataddr = RESUMCMD; 
'* Write Erase Resume command to the device 
*' 


while 
((*stataddr &: SUSPMASK) == ESUSPYESI 


'* Will remain in while loop until bit 6 of the 
*' 
'* 
Status Register goes to 0, signifying 
*' 
'* 
erase resumption 
*' 
while 
((*stataddr &: RDYMASK) == WSMRDY) 
'* Will remain in while loop until bit 7 of the 
*' 
'* 
Status Register goes to 0, signifying 
*' 
'* 
that the WSM is once again busy 
*' 


/**********************************************************************************/ 
/* 
Function: End 
*/ 


/* 
Description: Checks to see if the WSM is busy 
*/ 


/* 
(is program/erase completed?) 
*/ 


/* 
Inputs: None 
*/ 
/* 
Outputs: statdata: Status Register data read from device 
*/ 
/* 
Returns: 0 = Program/Erase completed 
*/ 
/* 
1 = Program/Erase still in progress 
*/ 
/* 
Device Read Mode on Return: Status Register 
*/ 
/**********************************************************************************/ 


#define RDYMASK 
OX80 
/* Mask to isolate the WSM Status bit of the 
/* 
Status Register 
#define WSMRDY 
OX80 
1* Status Register value after masking. signifying 
/* 
that the WSM is no longer busy 


#define STATREAD 
OX70 
/* Read Status Register command 


#define SYSADDR 
0 
1* This constant can be initialized to any 
/* 
address within the memory map of the target 


/* 
28F001BX and is alterable depending on the 


/* 
system architecture 


/* Allows Status Register data to be passed back 
/* 
to the main program for further analysis 
I 
byte far *stataddr; 
/* Pointer variable used to write commands to 
/* 
device 


stataddr = (byte far*)SYSADDR; 
*stataddr = STATREAD; 
/* Write Read Status Register command to 28F001BX 


if (((*statdata= *stataddr) 5:RDYMASK) != WSMRDY) 


return (1); 
/* Program/erasure still in progress•••code "1" 
return (0); 
/* Program/erase attempt completed•••code "0" 


intel~ 


: -->.1. 
11;1'0::11\0.1 "'iJ"''''VU. 
I,.,VWP.Lt;l 
"'tJ~ 
J..U.L.L 
;:n.Cl.l.U~ n.ttgl.bl..er 
CneCK 
ror erase 
lproper 
., 
/* 
command 
sequence, 
Vpp low 
detect, 
erase 
success). 
This 
routine 
assumes 
*/ 
/* 
that 
erase 
completion 
has 
already 
been 
checked 
in function 
end() 
and 
*/ 
/* 
therefore 
does 
not 
check 
the WSM 
Status 
bit 
of the 
Status 
Register 
*/ 
/* 
Inputs: 
statdata: 
Status 
Register 
data 
read 
in function 
end 
*/ 
/* 
Outputs: 
None 
*/ 
/* 
Returns: 
0 
Erase 
completed 
successfully 
*/ 
/* 
1 
Error; 
Vpp 
low 
detect 
*/ 
/* 
2 = Error; 
Block 
erase 
error 
*/ 
/* 
3 
Error; 
Improper 
command 
sequencing 
*/ 
/* 
Device 
Read 
Mode 
on Return: 
Same 
as when 
entered 
*/ 
/***********.**********************************************************************/ 


#define 
ESEQMASK 
OX30 
/* Mask 
to 
isolate 
the 
Erase 
and 
Program 
*/ 
/* 
Status 
bits 
of the 
Status 
Register 
*/ 
#define 
ESEQFAIL 
OX30 
/* Status 
Register 
value 
after 
masking 
if erase 
*/ 
/* 
command 
sequence 
error 
has 
been 
detected 
*/ 


#define 
ERRMSK 
OX20 
/* Mask 
to 
isolate 
the 
Erase 
Status 
bit 
of the 
*/ 
/* 
Status 
Register 
*/ 


#define 
ERASERR 
OX20 
/* Status 
Register 
value 
after 
masking 
if erase 
error 
*/ 
/* 
has 
been 
detected 
*/ 


#define 
VLOWMASK 
OX08 
/* Mask 
to 
isolate 
the 
Vpp 
Status 
bit 
of the 
Status 
*/ 
/* 
Register 
*/ 


#define 
VPPLOW 
OX08 
/* Status 
Register 
value 
after 
masking 
if Vpp 
low 
*/ 
/* 
has 
been 
detected 
*/ • 


int 
eraschk(statdata) 


byte 
statdata; 
/* Status 
Register 
data 
that 
has 
been 
already 
read 
*/ 
/* 
from 
the 
28F001BX 
in function 
end() 
*/ 


( 
if 
((statdata 
& VLOWMASK) 
== VPPLOW) 


return 
(1) ; 
/* Vpp 
low 
detect 
error, 
return 
code 
"1" 
*/ 


if 
((statdata 
& ERRMSK) 
== ERASERR) 


return 
(2); 
/* 
Block 
erase 
error 
detect, 
return 
code 
"2" 
*/ 


if 
((statdata 
& ESEQMASK) 
== ESEQFAIL) 
return 
(3); 
/* Erase 
command 
sequence 
error, 
return 
code 
"3" 
*/ 


return 
(0); 
/* Block 
erase 
success, 
return 
code 
"0" 
*/ 


/••••• ***.*.*.*********.********** 
•• ***********.*.************.******************/ 


'* 
Function: Progbgn 
*' 


'* 
Description: Begins byte program sequence 
*' 


'* 
Inputs: pdata: Data to be programmed into the device 
*' 


'* 
paddr: Target address to be programmed 
*' 


'* 
Outputs: None 
*' 


'* 
Returns: 0 = Program successfully initiated 
*' 


'* 
1 = Program not initiated (ID check error) 
*' 


'* 
Device Read Mode on Return: Status Register 
(ID if returns 1) 
*' 


/********************************************************************************/ 


byte pdata; 
byte far *paddr; 
'* Data to be programmed into the 28FOOIBX 
'* paddr is the destination address for the data 
'* 
to be programmed 


( 
if (idread() == 1) 
,* Device ID read error•••powered up? 
*' 


return (1) ; 
*paddr 
SETUPCMD; 
,* Write Program Setup command and 
*' 


,* 
destination address 
*' 


*paddr 
pdata; 
,* Write program data 
*' 


,* 
and destination address 
*' 


return 
(0) ; 


/**********************************************************************************/ 
/* 
Function: 
Progchk 
*/ 


/* 
Description: 
Completes 
full 
Status 
Register 
check 
for 
byte 
program 
(Vpp low 
*/ 
/* 
detect, 
programming 
success). 
This 
routine 
assumes 
that 
byte 
program 
*/ 
/* 
completion 
has 
already 
been 
checked 
in 
function 
end() 
and 
*/ 
/* 
therefore 
does 
not 
check 
the 
WSM 
Status 
bit 
of 
the 
Status 
Register 
*/ 


/* 
Inputs: 
statdata: 
Status 
Register 
data 
read 
in 
function 
end 
*/ 
/* 
Outputs: 
None 
*/ 


/* 
Returns: 
0 = Byte 
programming 
completed 
successfully 
*/ 


/* 
1 = Error; 
Vpp 
low 
detect 
*/ 


/* 
2 = Error; 
Byte 
program 
error 
*/ 


/* 
Device 
Read 
Mode 
on Return: 
Status 
Register 
*/ 
/**********************************************************************************/ 


/* Mask 
to isolate 
the Program 
Status 
bi t of the 
/* 
Status 
Register 
/* Status 
Register 
value 
after 
masking 
if 
program 
/* 
error 
has 
been 
detected 
/* Mask 
to 
isolate 
the 
Vpp 
Status 
bit 
of 
the 
Status 
/* 
Register 
/* Status 
Register 
value 
after 
masking 
if Vpp 
low 
/* 
has 
been 
detected 


/* Status 
Register 
data 
that 
has 
been 
already 
read 
/* 
from 
the 
28FOOIBX 
in 
function 
end() 


( 


if 
(statdata 
& VLOWMASK) 
== VPPLOW) 
return 
(1); 
/* Vpp 
low 
detect 
error, 
return 
code 
"I" 
if 
(statdata 
& PERRMSK) 
== PROGERR) 
return 
(2); 
/* 
Byte 
program 
error 
detect, 
return 
code 
"2" 
return 
(0); 
/* Byte/string 
program 
success, 
return 
code 
"0' 


J 
• 


/************************************************************************************/ 
/* 
Function: Idread 
*/ 
/* 
Description: Reads the manufacturer and device IDs from the target 28FOOIBX 
*/ 
/* 
Inputs: None 
*/ 
/* 
Outputs: mfgrid: Returned manufacturer ID 
*/ 
/* 
deviceid: Returned device ID 
*/ 
/* 
Returns: 0 = ID read correct 
*/ 
/* 
1 = Wrong or no ID 
*/ 
/* 
Device Read Mode on Return: Intelligent Identifier 
*/ 
1*****************************************************~******************************/ 


/* Address 
"0" 
for the target 28FOOIBX ••• 
/* 
alterable depending on the system 


/* 
architecture 
/* Address "I" for the target 28FOOIBX••• 
/* 
alterable depending on the system 


/* 
architecture 
/* Intelligent Identifier command 
/* Manufacturer ID for Intel devices 
/* Device ID for 28FOOIBX-T; change to 95H if 
/* 
using 28FOOIBX-B!!! 


#define IDRDCOMM 
#define INTELID 
#define DVCIDBT 


OX90 
OX89 
OX94 


/* The manufacturer ID read by this function, to 
/* 
be transferred back to the calling 


/* 
program 
/* The device ID read by this function, to be 
/* 
transferred back to the calling function 


( 
byte far *tempaddr; 


tempaddr 
(byte far*)MFGRADDR; 
*tempaddr= IDRDCOMM; 
/* Write intelligent identifier command to an 
*/ 
/* 
address within the 28FOOIBX memory map 
*/ 
/* 
(in thisease, 
OOH) 
*/ 


*mfgrid 
*tempaddr; 
/* Read mfgr ID, tempaddr still points at address "0" */ 
tempaddr 
(byte far*)DEVICADD;/* Point to address "I" 
for the device specific ID 
*/ 


*deviceid= *tempaddr; 
/* Read device ID 
*/ 
if ((*mfgrid 
!= INTELID)II (*deviceid != DVCIDBT)1 
return (1); 
/* ID read error; device powered up? 
*/ 
return (0); 


/********************************************************************************/ 
1* 
Function: Statrd 
*1 
1* 
Description: Returns contents of the target 28F001BX Status Register 
*1 
1* 
Inputs: None 
*1 
1* 
Outputs: statdata: Returned Status Register data 
*1 
1* 
Returns: Nothing 
*1 
1* 
Device Read Mode on Return: Status Register 
*1 
/**************************************************************.*.* 
••• *.*.*******/ 


#define STATREAD 
#define SYSADDR 


OX70 
o 
1* Read 
1* 
This 
1* 
1* 
1* 
1* 


Status Register command 
constant can be initialized 
to any address within the 
memory map of the target 28F001BX 
and is alterable depending on 
the system architecture 


1* Allows Status Register data to 
1* 
be passed back to the calling program 


1* 
for further analysis 


( 
byte far *stataddr; 


stataddr 
*stataddr 


1* Pointer variable used to write 
1* 
commands to device 


= (byte far*)SYSADDR; 
= STATREAD; 
1* Write Read Status Register 
1* 
command to 28F001BX 


*statdata 
= *stataddr; 
retu~; 
) 
• 


/**********************************************************************************/ 
/* 
Function: Statclr 
*/ 


/* 
Description: Clears the 28F001BX Status Register 
*/ 


/* 
Inputs: None 
*/ 


/* 
Outputs: None 
*/ 


/* 
Returns: Nothing 
*/ 


/* 
Device Read Mode on Return: Status Register 
*/ 


/**********************************************************************************/ 


#define STATCLER 
#detine SYSADDR 


OX50 
o 
/* Clear Status Register command 
*/ 


/* This constant can be initialized to any 
*/ 


/* 
address within the memory map of the target*/ 


/* 
28F001BX and is alterable depending on 
*/ 


/* 
the system architecture 
*/ 


( 
byte far *stataddr; 
/* Pointer variable used to write commands to 
/* 
device 


stataddr 
*stataddr 


= (byte far*)SYSADDR; 
= STATCLER; 
/* Write Clear Status Register command to 
/* 
28F001BX 
return; 
I 


/**********************************************************************************/ 
/* 
Function: Rdmode 
*/ 


/* 
Description: Puts the target 28F001BX in Read Array Mode. This function 
*/ 


/* 
might be used, for example, to prepare the system for return to code 
*/ 


/* 
execution out of the flash memory after program or erase algorithms 
*/ 


/* 
have been executed off-chip 
*/ 


/* 
Inputs: None 
*/ 


/* 
Outputs: None 
*/ 


/* 
Returns: Nothing 
*/ 


/* 
Device Read Mode on Return: Array 
*/ 


/*********************************************************************************/ 


#define RDARRAY 
#define SYSADDR 
OXFF 
o 
/* Read 
/* This 
/* 
/* 
/* 


Array command 
*/ 


constant can be initialized to any 
*/ 


address within the memory map of the target */ 
28F001BX and is alterable depending on 
*/ 


the system architecture 
*/ 


{ 
byte far *tempaddr; 
/* Pointer variable used to write commands to 
/* 
device 


(byte far*)SYSADDR; 


= RDARRAY; 
/* Write Read Array command to 28F001BX 
tempaddr 
*tempaddr 
return; 
I 


/ ••••••• 
*••••••••••••••••••••••••••••••••••••••• 
* •••••••••••••••••••• 
* •• * •••••••••• 
/ 


/* 
Function: Rdbyte 
*/ 
/* 
Description: Reads a byte of data from a specified address and 
*/ 
/* 
returns it to the calling program 
*/ 
/* 
Inputs: raddr: Target address To be read from 
*/ 
/* 
Outputs: rdata: Data at the specified address 
*/ 
/* 
Returns: Nothing 
*/ 


/* 
Device Read Mode on Return: Array 
*/ 


/ ••••• *.* •••••• 
*.**.* ••••••••• *••*••• ***.**.***.* 
•••• *•••••••• *••••••••••••••••••• 
*/ 


/* Returns data read from the device at 
/* 
specified address 


/* Raddr is the target address to be read from 


/* Write 
/* 
/* 
/* Read 


read array command to an address within 


the 28FOOlBX memory map (in this case the 
target address) 
from the specified address and store 
*rdata = *raddr; 
return; 
I 
• 


/*******************************************~**************************************/ 
/* 
Function: Vppup 
*/ 


/* 
Description: Ramps the Vpp supply to the target 28FOOIBX to enable 
*/ 


/* 
programming or erase. This routine can be tailored to the individual 
*/ 


/* 
system architecture. For purposes of this example, I assumed that a 
*/ 


/* 
system Control Register existed at system address 20000 hex. 
*/ 


/* 
with the following definitions: 
*/ 


1* 
*/ 


/* 
Bit 7: Vpph Control: 
1 = Enabled 
*/ 


/* 
0 = Disabled 
*/ 


/* 
Bit 6: PWD Control: 
1 
PowerDown Enabled 
*/ 


/* 
0 = PowerDown Disabled 
*/ 


/* 
Bits 5-0: Undefined 
*/ 


/* 
Inputs: None 
*/ 


/* 
Outputs: None 
*/ 


1* 
Returns: Nothing 
*/ 


/* 
Device Read Mode on Return: As existed before entering the function. 
*/ 


/* 
Part is now ready for program or erase command sequence 
*/ 


/*********************************~************************************************/ 


#define VPPHIGH 
#define SYSCADDR 
OX80 
OX20000 
/* Bit 7 = 1, Vpp elevated to Vpph 
*/ 


/* Assumed system Control Register Address */ 


{ 


byte far *contaddr; 
/* Pointer variable used to write data 
*/ 


/* 
to the System Control Register 
*/ 


contaddr 
*contaddr 
= (byte far*)SYSCADDR; 
= *contaddr I VPPHIGH; 
/* Read current Control Register data, 
/* 
"OR" with constant to ramp Vpp 


return; 


J 


/* 
Function: Vppdown 
*/ 
/* 
Description: Ramps down the Vpp supply to the target 28FOOlBX to 
*/ 
/* 
disable programming/erase. See above for a description of the 
*/ 
/* 
assumed system Control Register. 
*/ 
/* 
Inputs: None 
*/ 
/* 
Outputs: None 
*/ 
/* 
Returns: Nothing 
*/ 
/* 
Device Read Mode on Return: As existed before entering the function. Part 
*/ 
/* 
now has high Vpp disabled. If program or erase was in progress when 
*/ 
/* 
this function was called, it will complete unsuccessfully with Vpp low error */ 
1* 
in the Status Register. 
*/ 
1***********************************************************************************/ 


{ 
byte far *contaddr; 
/* Pointer variable used to write data to the 
/* 
system Control Register 


{byte far*)SYSCADDR; 


*contaddr & VPPDWN; 


/* Read current Control Register data, "AND" with 
/* 
constant to lower Vpp 


return; 
I 
• 


/**********************************************************************************/ 
/* 
Function: Pwdon 
*/ 
/* 
Description: Toggles the 28F001BX RP# 
pin low to put the device in Deep 
*/ 
/* 
PowerDown mode. See above for a description of the assumed 
*/ 
/* 
system Control Register. 
*/ 


/* 
Inputs: None 
*/ 
/* 
Outputs: None 
*/ 
/* 
Returns: Nothing 
*/ 
/* 
Device Read Mode on Return: The part is powered down. If program or erase 
*/ 
/* 
was in progress when this function was called, it will abort with 
*/ 
/* 
resulting partially programmed or erased data. Recovery in the form of 
*/ 
/* 
repeat of program or erase will be required once the part 
*/ 
/* 
transitions out of powerdown, to initialize data to a known state. 
*/ 
/**********************************************************************************/ 


#define PWD 
#define SYSCADDR 


OX40 
OX20000 
/* Bit 6 = 1, RP# 
enable 
/* Assumed system Control Register Address 


{ 
byte far *contaddr; 
/* Pointer variable used to write data to the 
*/ 


/* 
system Control Register 
*/ 
contaddr 
= (byte far*)SYSCADDR; 
*contaddr = *contaddr I PWD; 1* Read current Control Register data, "OR" with 
*/ 


/* 
constant to enable Deep PowerDown 
*/ 
return; 
I 


/************************************************************************************/ 
'* 
Function: Pwdoff 
*' 
'* 
Description: Toggles the 28F001BX RP# 
pin high to transition the part 
*' 
'* 
out of Deep PowerDown. See above for a description of the assumed system 
*' 
'* 
Control Register. 
*' 
'* 
Inputs: None 
*' 
'* 
Outputs: None 
*' 
'* 
Returns: Nothing 
*' 
'* 
Device Read Mode on Return: Read Array mode. Low voltage is removed 
*' 
'* 
from RP#. 
28F001BX output pins will output valid data time tPHQV 
*' 
'* 
after the RP# 
pin transitions high 
(reference the datasheet AC 
*' 
'* 
Read Characteristics) assuming valid states on all other control 
*' 
'* 
and power supply pins. 
*' 
/****************.****** 
•••• ***.**** 
•• ***.**** •• ***.***** 
•• ** •• ****.******.* 
••••••• *./ 


#define PWDOFF 
#define SYSCADDR 


OXBF 


\ OX20000 
/* Bit 6 = 0, RP# 
disabled 
'* Assumed system Control Register Address 


{ 
byte far *contaddr; 


contaddr 
*contaddr 


'* 
/* 
= (byte far*)SYSCADDR; 
= *contaddr & PWDOFF; '* 


/* 


Read current Control Register data, 'AND' with 


constant to disable Deep PowerDown 


Pointer variable used to write data to the 


system Control Register 


return; 
I 
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APPENDIX 
B 
MS-DOS ROM VERSION OVERVIEW 


Because MS-DOS ROM Version executes from ROM, 
only 15 KB of system RAM space is required for MS- 
DOS. For a typical user, this will result in a savings of 
about 40 KB of RAM over disk-based MS-DOS. As a 
result of this savings, the user is able to run more pro- 
grams and work with larger data files with the ROM 
Version than 
with disk-based MS-DOS. Instant-On 
MS-DOS ROM Version provides a significant reduc- 
tion in "boot time", or the amount of time it takes from 
the completion of the power-on self test until a DOS 
prompt appears. With the ROM Version, this typically 
takes one second. 


MS-DOS ROM Version is pre-installed by the OEM 
(original equipment manufacturer) in the system, thus 
freeing end users from the task of installing MS-DOS. 


MS-DOS ROM Version is structured such that it al- 
lows the OEM to include a specific routine to deter- 
mine which drive to boot from and any specific param- 
eters if booting from the ROM drive. This makes it 
possible to easily port the ROM Version to a wide vari- 
ety of hardware environments. MS-DOS ROM Version 


is also positioned independent, in that it can reside any- 
where in the 
"reserved" 
space (the 
area between 


640 KB and I MB). This provides an additional Ver- 
sion to the specific requirements of the OEM's hard- 
ware platform. 


ROM Economy 


MS-DOS ROM Version occupies only 62 KB of ROM 
space, thus minimizing the amount of ROM that an 
OEM must include in the system. Three modules reside 
in the reserved space: COMMAND.COM, 
IO.SYS and 


the DOS Kernel. All three are position independent, so 
an OEM can decide where to place these modules in the 
reserved area. 


Microsoft otTersa full compliment of localized version 
of MS-DOS ROM Version, including Kanji and Chi- 
nese translations. 


As PCs become the engines for many embedded appli- 
cations, manufacturers would like to develop new ap- 
plications utilizing existing PC software tools. MS-DOS 
ROM allows manufacturers to take full advantage of 
these tools. For instance, a programmer can develop 
and debug an application onto a PC subsystem which 
may be embedded into a larger system. This benefit 
translates into a cost savings when developing a solu- 
tion for vertical markets. 


intelQP 


APPENDIX 
C 
BIOS VENDOR 
INFORMATION 


American Megatr'ends Inc. (AMD 
1346 Oakbrook Drive, Suite 120 
Norcross, GA 30093 
(404) 263-8181 


This list is intended for example only, and in no way 
represents all companies that support BIOS software. 
Since this industry developes many new solutions each 
year, Intel recommends that the designer contact the 
vendors for their latest products. Intel will continue to 
work with BIOS vendors to develop optimum solutions. 
Intel Corporation assumes no responsibility for circuit- 
ry or software other than circuitry embodied in Intel 
products. No software patent licenses are implied. 


Award Software Inc. 
130 Knowles Drive 
Los Gatos, CA 95030 
(408) 370-7979 


Phoenix Technologies, LTD. 
40 Airport Parkway 
San Jose, CA 95110 
(408) 452-6500 


Systemsoft Corporation 
313 Speen Street 
Natick, MA 01760 
(508) 651-0088 
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APPENDIX D 


MICROPROCESSOR/MICROCONTROllER 


COMPATIBiliTY 
CHART 


28FOO1BX·T 
28FOO1BX-B 


x86 Family 
i960 KAlKB 
Microprocessor 


i860™ 
Family 
i960 SAlSB 
Microprocessor 


i960 CA Microprocessor 
MCSiX>-51Family 


MCSiX>·96Family 


Number 
Description 


-005 
Changed 
PWD# 
to RP# to match JEDEC naming conventions. 


Updated 
RP# 
control 
circuitry of Figure 7. 
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PC BIOS has been migrating to flash-based designs 
with the introduction of highly optimized flash memory 
architectures. The first phase of this shift in paradigm 
was from ROMIEPROM-based 
BIOS to Bulk Erase 
Flash memory-based BIOS to provide for in-system up- 
datable BIOS and hence an easy update capability 
when BIOS changes are required. 


The second phase improved the basic flash design to 
migrate towards boot block flash memory architecture 
with the Intel 28FOOIBX Flash Memory. This im- 
provement enabled the implementation 
of additional 
features and provided a true design capability for porta- 
ble PC BIOS. 


The third phase of this paradigm shift now starting to 
evolve, deals with the need to grow beyond the tradi- 
tional BIOS space limit of 128 Kbytes imposed by the 
original PC architecture to accommodate the advanced 
features of today's portable and desktop systems. 


This application note describes in detail this third phase 
in BIOS hardware and software implementation. Spe- 
cifically it will investigate why BIOS needs to grow be- 
yond the 128 Kbyte code size. Then, a design example 
using the Intel 28F200BX Boot Block Flash Memory 
will be explained in terms of both hardware and soft- 
ware. Finally, low voltage PC BIOS designs incorporat- 
ing 3.3V components are described. 


2.0 
PC BIOS TODAY AT THE 
128 KBYTE CODE SIZE LIMIT 


The Basic Input/Output 
System (BIOS) code is the 


lowest system level software which manages the inter- 
action between all hardware components (CPU, Chip- 
Sets and I/O) 
with all software modules (Operating 
Systems and Applications Code). BIOS manages many 
functipns in a PC, such as Power-On Self Test (pOST), 
input vector creation, I/O services and system initiali- 
zation. Therefore BIOS is the essential interface layer 
for full system functionality and compatibility. 


The original PC architecture, developed in 1981, put 
restrictions on the size and mapping of the BIOS code 
which was then a very simple piece of software (on the 
order of 32 Kbytes for the original BIOS code). It was 
located at the top of the PC's (8088) memory map 
which at the time was a maximum of I Mbyte. 


Then in 1984, the PC AT (80286) BIOS was expanded 
another 32 Kbytes for a total of 64 Kbytes. Subsequent- 
ly, towards the late 19808,more elaborate BIOS set-up 
utilities started to be an integral part of the BIOS code. 
In addition, personal computer manufacturers designed 
custom features into their BIOS code to offer more sys- 
tem flexibility. This increase in code complexity ex- 
panded the AT BIOS code another 64 Kbytes (for a 
total of 128 Kbytes) To occupy the total BIOS reserved 
space in the I Mbyte memory map. 


In the DOS memory map, BIOS is mapped down from 
the top of the 1-Mbyte address space (FOOOOHto 
FFFFFH). 
Additional BIOS code space is available for 


future enhancements from EOOOOHto EFFFFH. 
The 


next 256 Kbytes in the DOS memory map are reserved 
for adapter space to accommodate add-in boards (for 
enhanced graphics cards for instance). Finally the re- 
maining 640 Kbytes are reserved for the user to load 
hislher applications for execution. See Figure I for a 
graphical description. 


3.0 
WHY BIOS CODE WILL GROW 
BEYOND 128 KBYTES 


As advances in computer design affect both desktop 
systems (with the addition of EISA, PCI and on-board 
SCSI capabilities) and portable systems (with the addi- 
tion of advanced power management capability and 1/ 
o cards), the need for larger amounts of non-volatile 
memory space becomes evident. 


A Notebook or a Palmtop computer design, for in- 
stance, may put the operating system, the system man- 
agement code, set-up or utility programs into the non- 
volatile memory area to conserve precious RAM space 
for appliclI-tions. 


Additionally, Video BIOS can also be mapped into the 
Flash BIOS area. 


Therefore, to implement advanced capabilities and pro- 
vide new features (as described above) into powerful 
mobile computers, the 128 Kbyte BIOS code size limit 
had to be removed as it shall be explored in the next 
section. 


The BIOS of today and the future must adapt to the 
new requirements of portable PC designs and take ad- 
vantage of the new capabilities of low power PC chip- 
sets and I/O devices to achieve the highest performance 
and longest battery life at the lowest system cost. 


1 t.4BYTE 
DOS t.4AP 


(1024K) 
FFFFFH 
..•. ..•. 
BIOS 
CODE 
..•. ..•. ..•. 


(960K) 
EFFFFH 
..•. ..•. ..•. ..•. 
INTEL 
28F001BX-T 


ADDITIONAL 
BIOS 
SPACE 
..•. ..•. 
BOOT 
BLOCK 
FLASH 


..•. 
t.4Et.40RY 
t.4AP 
EOOOOH 


(896K) 
DFFFFH 
,, 
8K 
BOOT 
RECOVERY 
CODE 


ADAPTER 
SPACE 
,, 


AND 
GRAPHIC 
SPACE 
, 
4K 
PARAt.4ETER 
BLOCK 
,,, 
4K 
PARAt.4ETER 
BLOCK 


(640K) 
AOOOOH 
,,, 
,112K, 
t.4AIN 
BIOS 
CODE 
,, 


USER 
AREA 
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High integration CPUs and chip-sets allow for the de- 
sign oflight, small form factor portable computers with 
long battery life. 


BIOS is the ideal place for implementing the power 
management techniques pioneered with the Inte1386SL 
Microprocessor Superset. BIOS software vendors have 
implemented APM code for the latest generation of 
Notebook PCS. 


This added level of functionality imposed on the BIOS 
code increases the need for larger code space beyond 
the traditional 
128 Kbyte BIOS implementations seen 


in today's portable systems. 


APM code typically requires an additional 32 Kbyte of 
code space beyond the basic 64 Kbyte standard BIOS. 
Therefore, with the addition of APM, BIOS code grows 
to 96 Kbytes. 


3.2 
OptimiZing New Portable 
Applications 


With the implementation of PCMCIA cards for non- 
volatile file storage (with flash memory cards) and the 
ability to communicate over a telephone line (with mo- 
dem cards), mobile computers have truly become pow- 
erful tools on the road. 


The establishment of a common PC card standard for 
full system compatibility is described in the PCMCIA 
Standard 
release 2.0 (Personal 
Computer 
Memory 


Card International Association). Intel has developed a 
similar set of specifications fully compatible with the 
PCMCIA release 2.0 standard called the Exchangeable 
Card Architecture (ExCA). In order to implement card 
capability in a portable 
computer, 
additional 
BIOS 


code called Socket Services is minimally required to 
manage the system card functionality. To implement 
the specifications, socket services needs an additional 
16 Kbyte of code space. 


Furthermore, 
in the pen-based PC applications, there 


are even greater BIOS requirements to design-in unique 
features such as: pen extensions, touchscreen capability 


and character recognition interface code. These new 
features require the implementation of additional BIOS 
code (may be 16 Kbytes to 32 Kbytes). 


To take full advantage of Desktop system capabilities 
and performance while still having a portable computer 
to take on the road, docking station designs were con- 
ceived. This added level of complexity for the portable 
computer increases the code required in a basic system 
BIOS. 


3.3 
Putting Microsoft 
MS-DOS 5.0 
Operating 
System ROM Version 


Into the BIOS Chip 


Additionally, MS-DOS 5, ROM version is now becom- 
ing a standard in virtually all diskless sub-notebook, 
notebook and pen PC implementations. Many factors 
contribute to this approach. Chief among them is the 
reduced disk access and the resulting longer battery 
life. Another factor is the instant boot capability which 
is essential in certain applications. 


Today's MS-DOS 5, ROM version occupies 64 Kbytes 
of code space as specified from the Microsoft Product 
Description. 


3.4 
Relocated 
Resident VGA Code: 


VIDEO BIOS 


As described above in section 3.0, video BIOS can also 
be mapped into the system Flash BIOS memory allow- 
ing the entire system non-volatile storage requirements 
to be satisfied with one Flash device. Resident VGA 
BIOS code takes approximately another 32 Kbytes of 
memory space. 


In summary, adding all the above code size require- 
ments, the resulting BIOS storage area increases from 
the initial 128 Kbyte requirement to somewhere be- 
tween 208 Kbytes (without 
pen extensions) to 240 


Kbytes (including a pen input capability). 


There are already portable designs today which have 
filled a 256 Kbyte code space to accommodate some of 
the above mentioned needs. 


4.0 
HARDWARE 
DESIGN 
FOR A 
256 KBYTE BIOS 


4.1 
Intel 28F200BX/002BX 
Boot Block 
Flash Memory Family 


Building 
upon 
the 
wide 
acceptance 
of 
the 
Intel28FOOIBX I Mbit flash memory for BIOS designs, 
a new family of higher density flash components is now 
available to solve the PC designer's need of implement- 
ing extended BIOS code beyond 128 Kbytes. 


These new flash memories at the 2 Megabit density lev- 
els are structured around the same boot block architec- 
tu;e as the Intel 28FOOIBX and are therefore compati- 
ble. They provide block erasure capability, boot code 
hardware protection and very low power consumption 
as in the case of the 28FOOIBX. 


In addition, they incorporate new features to simplify 
the device interface and allow the system designer to 
optimize platform designs. 


These new features are summ~rized as follows: 
• User selectable 8-bit or 16-bit read/write operation 


(28F200BX) 


• 60ns access time performance 
• 
16 Kbytes Boot Block space which is hardware pro- 
tected 


1 EOOOH 


1DFFFH 


1DOOOH 


1CFFFH 


1COOOH 


1BFFFH 


• Two, 8 KBytes Parameter Blocks 


• One, 96 KByte Main Block 
One, 128 KByte Main Block 


• 8-bit only operation and packaging for space sensi- 


tive applications (28FOO2BX) 


In this section, we will describe these new features in 
more detail and discuss their system applicability. 


The blocking scheme, while still of the boot block type, 
is expanded by defining additional 
blocks (2 main 


blocks) to allow for software modularization and a self- 
contained design. 


As the size of the BIOS code stored in anyone 
device 


grows due to the complexity and high int~gration of 
chip-sets, so does the "kernel" code stored In the boot 
section. The boot and parameter blocks were accord- 
ingly doubled in size in comparison to the 28FOOIBX 
device. The two parameter blocks of 8 KBytes each 
allow the PC designer to store BIOS extensions or Bat- 
tery-Backed SRAM configuration data (CMOS RAM, 
EISA configuration parameters). The two main blocks 
are used to store the main BIOS code in modular fash- 
ion if so desired for future easy updates. These main 
blocks can also be used to store ROM-executable Oper- 
ating System software such as MS-DOS 5, ROM ver- 
sion or drivers and utilities. Refer to Figure 2 for the 
block 
locations 
for 
both 
the 
28F200BX-T 
and 


28FOO2BX-T. 


3COOOH 


3BFFFH 


3AOOOH 


39FFFH 


Valid Addresses 
in X16 Mode 
(BYTE# 
= 1): AO-A16 


Valid Addresses 
in X8 Mode 
(BYTE# 
= 0): 
A-1 (lowest 
order 
address) 
and AO-A16 


28F200BX-T Top Boot Map 
28F002BX-T Top Boot Map 


Figure 2. 28F200BX-T/002BX-T 
Memory Maps 


In addition, the 28F200BX/OO2BX devices incorporate 
new capabilities desired by today's sophisticated PC de- 
signers. 


The byte-wide or word-wide feature available as a de- 
signer-selectable option gives the ability to interface to 
an 8-bit or l6-bit wide bus. The performance and hard- 
ware goals of some systems may require l6-bit BIOS 
data bus. A system with a small amount of RAM and a 
large amount of flash memory-based operating system 
code for example, may require a l6-bit BIOS data bus 
to maintain a high performance level of operation. 


The high access speed of these new devices, which for 
the first time break the 60 ns barrier at the 2M and 4M 
densities, is another big advantage the PC designer can 
fully exploit to increase system performance and ac- 
ceptance in the marketplace. For example, a PC design- 
er may choose to execute BIOS directly out of flash 
memory instead of shadowing to system RAM as well 
as execute MS-DOS 5, ROM version out of flash for 
instant-on capability and to achieve better overall sys- 
tem performance. 


Block erasure allows independent modification of code 
and data and maximum flexibilty in production as well 
as after the system is shipped. The boot block, which is 
hardware protected, insures that minimal BIOS code is 
present to always boot up the system successfully. The 
16 Kbyte boot block is protected from alteration during 
system power excursions by a high voltage pin. This 
write protection pin called RP # has to transition to 
l2V with the normal Vpp voltage pin to allow for boot 
block write and erase operations. 


If systems are designed with the ability to jumper or 
switch RP# to high voltage (12V), guaranteed full non- 
volatility of the boot code is achieved. This feature al- 
ways guarantees system recovery from power failure 
and provides the security needed for the end user when 
performing BIOS code updates. 


To meet the crucial needs of lower power consumption, 
the 28F200BX/OO2BX devices incorporate a deep-pow- 
er down current mode activated through the RP # pin 
under the TTL/CMOS 
level control. When this pin 
transitions 
to ground the device typically consumes 


1 microwatt through the Vcc supply pin. 


In addition, the 28F200BX/OO2BX devices include an 
Automatic Power Savings feature during active mode 
of operation. This feature allows the memory chip to 
put itself in a very low current state when it is enabled 
but not accessing a new memory location. 


The 28F200BX/OO2BX devices incorporate an internal 
Write State Machine, Command User Interface and a 
Status Register to fully control the program and erase 
operations and greatly simplify the user write and erase 
algorithms and hence the update code procedure. They 
also include an erase suspend feature which allow the 
system to service interrupts and access the device dur- 
ing BIOS code updates (refer to Appendix B). 


Finally, 
the 
28F200BX/OO2BX, 2-Megabit 
devices 


have an equivalent 4-Megabit boot block flash memory 
family of devices called the 28F400BX/OO4BX, allow- 
ing for easy density upgrade and total compatibility be- 
tween systems using both types of memories. Refer to 
the documentation mentioned in the reference section 
of this application note. 


Figure 
3 is a block 
diagram 
description 
of the 


28F200BX/OO2BX products. 


4.2 
Extended 
Flash BIOS Design 
Example 


This design example focuses primarily on how to inter- 
face the Intel 28F200BX-T or 28FOO2BX-TBoot Block 
flash memories to the Inte1386SL Microprocessor Su- 
perset in a l6-bit wide or an 8-bit wide configuration 
respectively. This is an extended BIOS design example 
which demonstrates how the barrier of the 128·Kbyte 
BIOS size memory is eliminated. The design principles 
in this example apply to designs incorporating chip sets 
interfaced to SL Enhanced CPUs. Figure 4 shows an 
interface diagram of the Intel 28F200BX-T Boot Block 
Flash memory (128 K x 16) to the Inte1386SL Micro- 
processor superset. Figure 5 shows an equivalent inter- 
face diagram of the Intel 28FOO2BX-TBoot Block flash 
memory (256 K x 8) to the Inte1386SL Microprocessor 
Superset. 


The Inte1386SL Microprocessor Superset Flash BIOS 
interface supports up to 256 Kbytes of flash memory 
BIOS (a 2 Megabit flash memory device) to enable the 
system designer to meet specific design goals as de- 
scribed in section 3 above. 


The Inte1386SL Microprocessor Superset supports the 
following features: 
• Up to 256 Kbytes flash memory BIOS 


• VGA BIOS mapping into system BIOS 
• 8-bit or l6-bit BIOS interface 
• Programmable number of flash memory wait states 


for read access (from zero to fifteen Wait-States to 
optimize the system performance) 


• BIOS shadowing mechanism 


Ao - 
AI6 


~7 
(28F002BX-ONLY) 


CEN 


WEN 


OEN 


PWDN 


--et 


Flash BIOS size configurations in the Inte1386SL Mi- 
croprocessor Superset system are controlled by pro- 
gramming certain registers located in the normal I/O 
address space. 


When a 256 Kbyte Flash BIOS configuration is pro- 
grammed into the Inte1386SL Microprocessor Superset, 
128 Kbytes are directly accessible in the EOOOOH- 
FFFFFH 
address range. The other 128 Kbytes are de- 
coded at the top of the 16th or 32nd Megabyte of the 
Inte1386SL superset address space, Le., either: 


FCOOOOH-FDFFFFH 
or 
lFCOOOOH-1FDFFFFH. 
This extra ROM space is accessed by programming the 
ISA sliding control register to point to one of these two 
areas and then accessing the ISA sliding window in the 
DOOOOH-DFFFFH address range (64 Kbytes). This 
mechanism allows complete access of the 256 Kbytes of 
BIOS code without having to enter the Inte1386SL pro- 
tected mode. 


The BIOS code size is used to internally decode the 
ROM address space and generate two chip select sig- 
nals: ROMCSO# and ROMCSI 'I, to control the Flash 


BIOS device. In the case of a single Flash BIOS device, 
only ROMCSO# is needed to drive the CE# 
chip se- 
lect signal of the flash memory. 


In the diagram of Figure 4 note the following: 


• BYTE# signal is set high to enable 16-bit operation 


of the flash device. 


• The highest order system address line SA16 is in- 
verted when FLIP# 
signal becomes active at boot- 


up time to relocate the boot kernel code at the top of 
the I Mbyte memory map for the system to boot 
from it. (See section 4.5). 


• ROMI6/8# 
is set high to enable 16-bit bus opera- 


tions. 
• RP# 
signal is gated by the PWRGOOD signal (for 


reset when power fails) and by system RESET sig- 
nal. 


• Vpp supply voltage is switched to the flash device 


only when BIOS updates are required. 


In addition to the above considerations, note the fol- 
lowing in Figure 5: 


• The highest order system address line SA17is also 


inverted when FLIP# 
signal becomes active at sys- 
tem boot-up time. 


• ROM16/8# 
is set low to enable 8-bit only bus oper- 
ations. 
• 
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In BIOS Designs> 
128 Kbytes. 


An ISA sliding window mechanism is similar to the 
Expanded Memory System or EMS mechanism. It al- 
lows the access of extended memory on the ISA bus in 
real mode. Hence, there is no conflict in memory allo- 
cation when the BIOS chip is accessed during system 
power-up. This is a straightforward method of imple- 
menting a 256 Kbyte extended Flash BIOS. Figure 6 
shows how extended memory is accessed with the ISA 
sliding window. This capability is designed into Intel's 
386SL CPU and should be defined into chip sets sup- 
porting SL enhanced CPUs. 


Therefore to use a 256 Kbyte Flash device the follow- 
ing steps are specified as an example: 


Example: 
Enable support of 256 Kbyte Flash BIOS 
Enable Flash BIOS write access 
One BIOS Flash Bank used 
Program 
zero 
Flash 
wait 
states 
(for 
16 
MHz 
Inte1386SL with 
a 
60 
ns 
Intel 
28F200BX-T 
or 
28FOO2BX-T). 
Program the ISA Sliding Window to access memory 
between FCOOOOHand FDFFFFH. 


if ROM Chip-select decode register is not enabled 
enable ROM chip-select decode register 


832KB 
~ 
77 


8KBn 
'SA 
SLIDING 


WINDOW 
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4.4 
The 28F200BX· T128F002BX· T In 
the 1 Mbyte DOS Memory Map 


In addition, due to the above mapping considerations 
when interfacing a 256 Kbyte flash BIOS chip to any 
chip set or the Intel386SL Microprocessor Superset, it 
is necessary to flip the 256 Kbyte flash memory device 
in half at boot time to relocate the Boot Block in the 
correct 
physical 
address 
at 
FFFFFH 
for 
the 


Inte1386SL CPU to boot from it. This is due to the fact 
that the Intel386SL Microprocessor Superset uses the 
bottom 128 Kbytes of the 256 Kbyte Flash chip to map 
down to the real mode 
128 Kbyte allocated BIOS 


space. 


Figure 7 shows how the Intel 28F200BX-T flash mem- 
ory device fits in the DOS 1 MByte memory map. The 
same memory map applies to the 28FOO2BX-Tdevice 
when designing an 8-bit only system. 


5.0 
SOFTWARE 
DESIGN 
CONSIDERATIONS 


The subject of BIOS code update is already discussed 
extensively in references [1] and [3]. Appendix A of 
this application note is an example of a flash BIOS up- 
date routine. In this section, we mainly discuss consid- 
erations of code segmentation and describe how the sys- 
tem handles the different pieces of code under various 
conditions. 
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As explained in section 3, advanced notebook designs 
require a large ROM space to conserve valuable RAM 
space for applications. In addition to the boot kernel 
code and standard BIOS code, one may put the follow- 
ing code modules: 


• APM code 


• VGA BIOS 
• ExCA socket services 
• Operating Systems such as Microsoft MS-DOS 5.0 
ROM version 


When designing a 256 Kbyte BIOS system as described 
in 
this 
application 
note 
using 
Intel's 
28F200BX/ 
002BX, 
proper 
code 
segmentation 
is essential 
to 
achieve optimum system performance. 


We can divide the system's operating environment into 
either: 


BOOT-TIME 
CONDITIONS 
(when system powers- 
up or is rebooted) 


or RUN-TIME 
CONDITIONS 
(after boot-up is com- 
plete) 


The code modules described above are used at different 
times during normal system operation. Hence, a segre- 
gation of the code stored in the flash memory is neces- 
sary for proper system operation. 


The system requires the boot kernel to be present at the 
FFFFFH 
segment during this portion of the cycle. 


When using the 28F200BX/OO2BX flash memory, the 
first page present will be the top 128 Kbyte. The rest of 
the first page is used to store APM code, VGA BIOS 
code or ExCA socket services. These code modules· are 
then copied from their location below the boot block to 
system RAM for later initialization after the standard 
BIOS has started. 


Once all code modules are copied into RAM, this first 
128 Kbyte page of flash can be swapped out or ex- 
changed with the 2nd 128Kbyte page which is required 
for run-time execution. 


Standard BIOS code is required to be present from 
EOOOOHto FFFFFH 
segment during this time period 
to handle any BIOS calls and maintain proper system 
operation. 


Microsoft MS-DOS 5.0 ROM version code is also re- 
quired to be present so the BIOS can "SCAN" it in as 
an adapter. 
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The 16 Kbyte recovery code is critical when a BIOS 
update does not successfully complete. The reasons for 
this failure can be divided into two categories: 
I. System power failure during BIOS update 
2. System reset (soft boot) during BIOS update 


The processor will execute recovery code out of the 16 
Kbyte boot block when either power is restored or 
when the system boots up after the reset function. 


The 16 Kbyte size recovery code allows the software 
designer to incorporate as many BIOS system checks as 
possible to implement basic system functionality. 


Cursor Positioning 
Keyboard services 
Time of day service 
Basic System services 


Three basic algorithms allow the system designer to 
reprogram the Flash BIOS chip and perform the neces- 
sary tasks for a BIOS update. These algorithms are: 


Automated BytelWord-wide programming 
Automated Block erase 
Erase Suspend and Resume 


For a description of these algorithms, the reader is en- 
couraged to study reference [5]. Appendix B in this 
application note includes the four flowcharts associated 
with the algorithms. 


To obtain the software drivers necessary to control the 
device reprogramming operations, consult your local 
Intel sales office. 


Power management is an essential part of any true por- 
table PC design. The design of sophisticated power 
management techniques is becoming a key differentia- 
tor between different machines, and hence is a competi- 
tive advantage for the system integrator. 


To help the system designer with this often difficult 
task of optimizing system performance and battery life, 
the 28F200BX family of products includes three dis- 
tinct low power modes of operation. These are: 
• Standby Current Mode, where the device typically 


consumes 50 J.LA 


• AutomatIc yower ~avlngs reawre, wnere me Ut:VIU:: 
typically consumes 1 mA 


• Deep powerdown Mode, where the device typically 
consumes 0.2 /loA 


For a detailed description of these modes of operation, 
consult reference [8]. 


The ability to design 3.3V systems used to be a future 
consideration. Longer battery life and lighter weight 
portable computers are some of the key objectives for 
any portable design. Now, thanks to the increasing 
availability of low voltage components, true low power 
machines are possible to realize in practice. 


The list of 3.3V components available to build the es- 
sential parts of a portable computer is becoming longer 
every day. Semiconductor manufacturers have recog- 
nized the urgent need to supply low voltage chips to the 
portable marketplace. 


The Intel 28F200BX/OO2BX Boot Block Flash Memo- 
ries are available in 3.3V versions. These low voltage 
versions of the 28F200BX/002BX 
are functionally 
equivalent to their 5V counterparts and are 100% pin- 
out compatible. So a system converting to 3.3V opera- 
tion 
can 
substitute 
low 
voltage 
2 
Mbit 
chips 


(28F200BX-L/002BX-L) 
when desired without 
any 
circuit board modification. 


6.2 
Power Savings and Improved 
Battery Life 


The 28F200Bx/OO2BX 3.3V chips reduce the total 
power drawn during normal read operation to less than 
25% of the total power in 5V mode. This is a substan- 
tial savings in current which translates to 25% less bat- 
tery drain and hence longer battery life. 


Similarly, low voltage version of the most popular mi- 
croprocessors reduce the total power dissipated by a 
substantial amount. 


The combination of these current savings plus the other 
system components current reductions improve battery 
life dramatically and allow the mobile PC user to bene- 
fit from weight reduction, longer operating time, lower 
system cost and higher performance. 


This application note deals with the concepts of extend- 
ed BIOS implementations in portable PC designs, but it 
can also be easily adapted to desktop PC systems for 
which 
BIOS code requirements 
can 
easily exceed 


128 Kbytes. 


We have attempted to explain the requirements and the 
needs of today's advanced portable BIOS designs which 
have to meet many difficult and often conflicting re- 
quirements. 


Boot Block flash memory is the ideal storage solution 
to implement the above mentioned features. Further- 
more, as the cost of solid state non-volatile flash memo- 
ry keeps decreasing, the need to switch to these types of 
media for storing extended BIOS, operating system 
software, utilities, and in the future application code, 
becomes more evident and perhaps the only way a PC 
manufacturer can effectively compete by producing the 
best engineered, most optimally designed notebooks, 
palmtop PCs and pen-based computers. 


For more information on the concepts presented in this 
application note, the reader is encouraged to reference 
the following documents. 


U] Technical Paper: "Flash: The Optimum BIOS Stor- 
age Device" by Brian Dipert, 1991 SVPC - 
Order 


Number 297003 


[2] "ROM BIOS: The best place for portable PC Pow- 
er-Management 
features" 
by Lance Hansche, 
1991 


SVPC 


[3] AP-341: "Designing an Updatable 
BIOS Using 


Flash Memory"--0rder 
Number 292077 


[4] AP-357: "Power Supply Solutions for Flash Memo- 
ry,"--0rder 
Number 292092 


[5] Intel 28F200BX/OO2BX Datasheet--0rder 
Num- 


ber 290448 


[6] Intel 28F400Bx/OO4BX Datasheet--0rder 
Num- 


ber 290451 


[7] Intel 28F200BX-L/002BX-L Datasheet-290449 


[8] Intel 28F400BX-LlOO4BX-L Datasheet-290450 
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Example of a Flash Update Utility 
Pseudo-Code 


This example is for a standard BIOS code and APM 
code update using the 28F200BX/OO2BX flash device. 
Modify this utility, if required, to suit your particular 
system needs. 


Initialize system (set-up user screen, check battery pow- 
er, check device ID) 


Get BIOS/ APM me Options (from floppy or through 
modem) 


If no me present 
Send error message to insert BIOS update floppy, or 
press ESC to exit 


Display BIOS/ APM 
update 
files, prompt 
user for 


choice and load to memory 


If file is invalid 
Prompt for correct me or exit 


Inform user of upcoming event, provide option to con- 
tinue or exit 


If user continues, inform user not to turn off the 
power or soft-reboot system (CNTL-ALT-DEL) 


If system interrupt occurs 
Suspend erase operation if flash memory access is 
required 


Write new file(s) into flash memory 96-Kbyte main 
block 


Prompt user to reboot the system to continue normal 
operation 


APPENDIX B 


28F200BX·T128F002BX·T Programming 
Flowcharts 


• 


Bus 
Command 
Comments 
Operation 


Write 
Setup 
Data = 40H 


Program 
Address = Byte to be 
programmed 


Write 
Program 
Data to be programmed 
Address = Byte to be 
programmed 


Read 
Status Register Data. 
Toggle OE # or CE # to update 
Status Register 


Standby 
Check SR.? 


1 = Ready, 0 = Busy 


Repeat for subsequent bytes. 


Full status check can be done after each byte or after a 
sequence of bytes. 


Write FFH after the last byte programming operation to 
reset the device to Read Array Mode. 


Bus 
Command 
Comments 
Operation 


Standby 
CheckSR.3 
1 = Vpp Low Detect 


Standby 
Check SR.4 
1 = Byte Program Error 


SR.3 MUST be cleared, if set during a program attempt, 
before further attempts are allowed by the Write State 
Machine. 


SR.4 is only cleared by the Clear Status Register 
Command, in cases where multiple bytes are programmed 
before full status is checked. 


If error is detected, clear the Status Register before 
attempting retry or other error recovery. 


Bus 
Command 
Comments 
Operation 


Write 
Setup 
Data = 40H 


Program 
Address = Word to be 
programmed 


Write 
Program 
Data to be programmed 


Address = Word to be 
programmed 


Read 
Status Register Data. 


Toggle OE'" or CE '" to update 
Status Register 


Standby 
CheckSR.7 


1 = Ready, 0 = Busy 


Repeat for subsequent words. 


Full status check can be done after each word or after a 
sequence of words. 


Write FFH after the last word programming operation to 
reset the device to Read Array Mode. 


Bus 
Command 
Comments 
Operation 


Standby 
Check SR.3 


1 = Vpp Low Detect 


Standby 
Check SR.4 


1 = Word Program Error 


SR.3 MUST be cleared, if set during a program attempt, 
before further attempts are allowed by the Write State 
Machine. 


SR.4 is only cleared by the Clear Status Register 
Command, in cases where multiple words are programmed 
before full status is checked. 


If error is detected, clear the Status Register before 
attempting retry or other error recovery. 
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Bus 
COmmand 
COmments 
Operation 


Write 
setup 
Data = 20H 


Erase 
Address = Within block to be 
erased 


Write 
Erase 
Data = DOH 
Address = Within block to be 
erased 


Read 
Status Register Data. 


Toggle OE# orCE# 
to update 


Status Register 


Standby 
CheckSR.7 
1 = Ready, 0 = Busy 


Repeat for subsequent blocks. 


Full status check can be done after each block or after a 
sequence of blocks. 


Write FFH after the last block erase operation to reset the 
device to Read Array Mode. 


Bus 
Command 
Commenta 
Operation 


Standby 
CheckSR.3 


1 = Vpp Low Detect 


Standby 
Check SR.4,5 


Both 1 = Command Sequence 
Error 


Standby 
CheckSR.5 


1 = Block Erase Error 


SR.3 MUST be cleared, if set during an erase attempt, 
before further attempts are allowed by the Write State 
Machine. 


SR.5 is only cleared by the Clear Status Register 
Command, in cases where multiple blocks are erased 
before full status is checked. 


If error is detected, clear the Status Register before 
attempting retry or other error recovery. 


Bus 
Command 
Comments 
Operation 


Write 
Erase 
Data = SOH 


Suspend 


Read 
Status Register Data. 


ToggleOE# 
orCE# 
to 
update Status Register 


Standby 
CheckSR.7 
1 = Ready 


Standby 
Check SR.6 


1 = Suspended 


Write 
Read Array 
Data = FFH 


Read 
Read array data from block 
other than that being 
erased. 


Write 
Erase Resume 
Data = DOH 


List of BIOS software vendors already supporting or announcing their future support for the 28F200BX/002BX 
flash BIOS chips: 


SystemSoft Corporation 
Contact: Cliff Sharin 
508-651-0088 
313Speen Street 
Natick, MA 01760 


American Megatrends, Incorporated 
Contact: Tom Rau 
404-246-8612 
1346 Oakbrook Drive, Suite 120 
Norcross, GA 30093 


Phoenix Technologies Ltd. 
Contact: Howard Cohen 
408-452-6529 
40 Airport Parkway 
San Jose, CA 95110 


Quadtel 
Contact: Dale Buscaino 
714-754-4422 (ext. 250) 
3190-J Airport Loop 
Costa Mesa, CA 92626 


Award Software, Inc. 
Contact: Jeffry Flink 
408-370-7979 (ext. 214) 
130 Knowles Drive 
Los Gatos, CA 95030-1832 
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Intel's 28F001BX ETOX (EPROM tunnel oxide) flash 
memories add selective block erasure, an integrated 
Write State Machine and powerdown capability to In- 
tel's standard flash memory product line. Flash memo- 
ry enhances EPROM 
non-volatility and ease of use 


through 
electrical erasure and reprogramming. 
Ad- 


vances in tunnel oxides and photolithography 
have 


made it possible to develop a double-polysilicon single- 
transistor read/write random access nonvolatile memo- 
ry, capable of greater than 100,000 reprogramming cy- 
cles. The 28FOOIBX flash memories electrically erase 
all bits in a block matrix via electron tunneling. The 
EPROM programming mechanism of hot electron in- 
jection is employed for electrical byte programming. 


A Command Register/Status 
Register interface to a 


Write State Machine, internal margin voltage genera- 
tion, 
power 
up/down 
protection 
and 
address/data 


latches augment standard EPROM circuitry to opti- 
mize Intel's 28FOOIBX family for microprocessor-con- 
trolled reprogramming. 


Read timing parameters 
are equivalent to those of 


CMOS EPROMs, EEPROMs and SRAMs. The 120 ns 
access time results from a memory cell current of ap- 
proximately 50 JLA, low resistance poly-silicide word- 
lines, advanced scaled periphery transistors and an op- 
timized data-out buffer. 


The dense one-transistor cell structure, coupled with 
high array efficiency, yields a one megabit die measur- 
ing 235 by 268 mils. 


Intel's ETOX flash memory technology is derived from 
its standard 
CMOS 
EPROM 
process base. Using 


advanced 
1.0 JLm 
double-polysilicon 
n-well CMOS 


technology, the 131,072 x 8 bit flash memories employ 
a 3.8 JLm x 4.0 JLm single transistor 
cell, affording 


equivalent array density as comparable EPROM tech- 
nology. The flash memory cell structure is identical to 
the EPROM structure, except for the thinner gate (tun- 
nel) oxide. Figure I compares the flash memory cell to 
the EPROM cell. 


EPROM Cell 
+VG 
t-L, 


fiRST 
LEVEL 
POL YSILICON 
(fLOATING) 


Flash Memory 
Cell 


+VG 
t-L, 


fiRST 
LEVEL 
POL YSI LICON 
(fLOATING) • 


High quality tunnel oxide under the single floating 
polysilicon gate promotes electrical erasure. All cells of 
a given block are simultaneously erased via Fowler- 
Nordheim 
tunneling. 
Applying 
12V on the block 


source junctions and grounding the select gates erases a 
given block. The internal Write State Machine (WSM) 
controls the erase algorithm, including block pre-pro- 
gramming before erasure. WSM-controlled erasure, in- 
cluding internal pre-programming, 
takes 2.1 seconds 
typical for each parameter block and the boot block, 
and 3.8 sec. typical for the main block. 


Programming 
is 
accomplished 
with 
the 
standard 
EPROM mechanism of hot electron injection from the 
cell drain junction to the floating gate. Programming is 
initiated by bringing both the select gate and the cell 
drain to high voltage. The internal WSM regulates the 


internal program algorithm after the correct command 
sequence is written to the 28FOOIBX.Typical program 
time is 18 fLsper byte. 


Write State Machine and Command! 
Status Registers 


Intel's 28FOOIBX flash memories contain an on-chip 
Write State Machine that automatically controls erase 
and program algorithms, dramatically simplifying user 
interface. Figure 2 shows the 28FOOIBX block dia- 
gram. 
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array read operations, without the need for additional 
control pins or the multiplexing of high voltage with 
control functions. The WSM, with its integrated oscil- 
lator, performs a majority of the standard flash memo- 
ry program and erase algorithms automatically. This 
makes system timers no longer necessary and frees the 
system to service interrupts or perform other functions 
during device erase or program. On-chip address and 
data latches minimize system interface logic and free 
the system bus. The Write State Machine accepts array 
read, ID read and Status Register read and clear com- 
mands whenever power is applied to the 28FOOIBX. 
High voltage (12V) on Vpp additionally enables suc- 
cessful program and erase. 


The WSM consists of a Command Register, Status 
Register, State Machine, oscillator, command decoder, 
data latch and address latch. The command decoder 
output feeds the State Machine, enabling the high volt- 
age flash-erase switch, program voltage generator and 
erase/program verify voltage generator. 


Functions are selected via the Command Register in a 
microprocessor write cycle controlled by the Chip En- 
able (CE#) and Write Enable (WE#) pins. The rising 
edge of WE# latches the address and data-in registers, 
and initiates an operation. Status Register contents are 
driven to the outputs on the falling edge of CE# or 
Output Enable (OE#), 
whichever occurs last in the 


read cycle. 


The Write State Machine is designed using clocked log- 
ic circuits. An on chip ring oscillator generates the 
clock signals. The frequency of a standard ring oscilla- 
tor varies with processing,temperature and supply volt- 
age. The improved design used on the 28FOOIBXmini- 
mizes these variations. 


The switching current of each stage in the ring oscilla- 
tor is set by a current reference. This reference current 
varies linearly with Vcc. The trip point of each ring 
oscillator inverter also varies linearly with Vcc. These 
two effects essentially cancel each other out and the 
resulting oscillator period is proportional to RC, with 
only a small dependence on Vcc. 


The value of R is set by an on chip resistor. The value 
of C is set by the gate capacitance of the inverters in the 
ring oscillator. Process variations in the values are re- 
duced by trimming the period of each oscillator during 
manufacturing. The resistor is the only source of tem- 
perature variation. 


temperature amI supply voltage. "he circuit works for 
supply voltages outside the normal operating condi- 
tions and for military temperatures. 


700 


'M' 
650 


-5 
c 
600 
0 
ii1 
'"0- 
550 
'"0•..« 
SOO 
--'--' 
<:; 
'" 
450 
0 


4.0 
4.5 
5.0 
5.5 
6.0 
6.5 


Vcc (Volts) 


Figure 3. Internal 
Oscillator 
Frequency 
vs Supply Voltage 
and Temperature 


The circuit that generates LOWVCCand LOWVpp is 
shown in Figure 4. Power supply voltages Vcc and 
Vpp are divided down and compared to a reference 
voltage. If the reference voltage is greater than the di- 
vided 
power 
supply 
voltage, 
the 
LOWVcc 
or 


LOWVpp signal will be pulled high. The VREF level 
generated by the voltage reference is independent of the 
supply voltage to the first order. 


The positive power supply to the circuit is provided by 
M I and M2. The source of M I and M2 will be pulled 
up to the maximum of (VPP-VTN) and (VCC-VTW). 
VTN is the threshold of an implanted N channel device, 
about O.9V.VTWis the threshold of a native N channel 
device, about OV.This scheme ensures that the circuit 
will work regardless of the applied supply voltages. 


The LOWVcc signal not only goes to the erase circuits, 
but also to the programming circuits and to the control 
logic to prevent any accidental writes to the array. The 
LOWVpp signal goes to the Write State Machine. If 
Vpp is detected as being low during a write, the low 
Vpp bit will be set in the Status Register. 


Erasure is achieved through a two-step write sequence. 
The erase setup code is written to the Command Regis- 
ter in the first cycle. The erase confirm code is written 
in the second cycle. The block to be erased is specified 
by writing both commands to any address within the 


BLOCK 
SELECT 


LATCHES 
AND 
DECODERS 


block. The address is latched and decoded internally by 
the 28FOOIBX, and erase of the desired block is subse- 
quently enabled. The rising edge of this second WE# 
pulse initiates the erase operation. The boot block will 
not erase unless the RP# 
or OE# signal is brought to 


high voltage VHH. 


The State Machine triggers the high voltage flash-erase 
switch, connecting the 12V supply to the source of all 
bits in the specified block, while all wordlines are 
grounded. 
The 
organization 
of 
the 
block 
source 


switches is shown in Figure 5. Fowler-Nordheim 
tun- 


neling results in the simultaneous erasure of all bits in 
the addressed block. 


The block source switch controls the source voltage of 
the bits in a particular block. This circuit is shown in 
Figure 6. During erase, M2 is off and Ml pulls the 
source to Vpp. When not in erase, Ml is off and M2 
pulls the source to ground. The high voltage latch 
formed by M4-M7 
converts the low voltage ERASE 


signal to a high voltage signal that turns Ml off or on. 


The tunneling that occurs during erase requires only a 
small amount of current. However, the grounded gate 
initial erase current that occurs on the source of every 
bit in the array is large. Ml is made large enough to 
supply this current and still keep the voltage on the 
source high enough for fast erase time. 


The LOWVee 
signal protects the array from being 
erased when Vpp is at a high voltage but Vee is a low 
voltage. When this occurs, M3 will pull the block 
source to ground. The high voltage latch will be forced 
into the state that turns Ml off by M8. 


After receiving the erase command sequence, the WSM 
automatically 
controls block precondition 
(program- 
ming of all bytes to OOHwithin the chosen block), erase 
pulses and pulse repetition, timeout delays and byte-by- 
byte verification of all block addresses using the inter- 
nally-generated 
erase margin 
voltage. The 
internal 
erase and verify operations continue until the entire 
block is erased. System software need only poll the 
Status Register to determine when the WSM has suc- 
cessfully completed the erase algorithm. 


Programming follows a similar flow. The program set- 
up command is written to the Command Register on 
the first cycle. The second cycle loads the address and 
data latches. The rising edge of the second WE# pulse 
initiates programming by applying high voltage to the 
gates and drains of the bits to be programmed. 


As with erasure, the WSM controls program pulses and 
pulse repetition, timeout delays and byte verification. 
Program and program verify (at the internally-generat- 
ed verify voltage) continue 
until 
the byte is pro- 
grammed. System software, polling the Status Register, 
is informed of programming state thru specific status 
bits. 


The 28FOOIBX has a deep power down mode that re- 
duces Ice and Ipp to typically 0.05 /LA and 0.8 /LA, 
respectively. When RP# 
is low, the part is in deep 


power down mode. When RP # is high, the part can be 
placed in an active or standby mode by state of the 
CE# pin. 


The deep power down mode is similar to the standby 
mode except that more circuits are turned off. This 
means that much less power is consumed; it also means 
that it takes longer for the part to transition into the 
active mode. 


A diagram of the power down circuit is shown in Fig- 
ure 7. The TTL buffer formed by Ml-M3 
enables the 
low power detect circuits, the redundancy address flash 
bits and the CE# 
TTL buffer formed by M4-M6. 
In 


previous Intel flash chips these circuits were always en- 
abled. The time for these circuits to turn on determines 
the RP # access time and write specifications. 


RP # will function properly with TTL level inputs. 
However, to get the lowest possible power consump- 
tion, full CMOS levels should be used. If voltage on the 
gate ofM3 raises above its threshold voltage ofO.9V, it 
will turn on and draw current. Input voltages in the 
0.7-0.9 
range could cause enough subthreshold con- 
duction in M3 to exceed the deep power down current 
specification. This is why the input voltage for RP# 
is 


specified as GND ±0.2V. 


The use of RP# 
during system reset is important with 
automated write/erase devices. When the system comes 
out of reset it expects to read from the flash memory. 
Automated flash memories provide status information 
when accessed during write/erase modes. If a CPU re- 
set occurs with no flash memory reset, proper CPU 
initialization would not occur because the flash memo- 
ry would be providing the status information instead of 
array data. Intel's Flash Memories allow proper CPU 
initialization following a system reset through the use 
of the RP# 
input. In this application RP# 
is con- 
trolled by the same RESET # signal that resets the sys- 
tem CPU. 


intel~ 


Erase and program verification ensure the data reten- 
tion of the newly altered memory bits. The cell margin- 
ing performed by the WSM during the verify phase of 
the automated algorithms is more reliable than histori- 
cal EEPROM schemes, as margining tests the amount 
of charge stored on the floating gate. 


TO THE 
REST 
OF 


THE 
CHIP 


Intel's 28FOOlBX flash memories employ a unique cir- 
cuit to internally generate the erase and program verify 
voltages. Figure 8 shows a simplified version of the cir- 
cuit. The circuit consists of a high voltage switch and 
the verify voltage generator. Transistors Ml through 
M4 constitute the high voltage switch which discon- 
nects Vpp from the resistor when the device is not in 
the verify mode. The verify voltage generator includes a 
resistor divider and a butTer. Internal margin voltage 
generation maintains microprocessor compatibility by 
eliminating the need for external reference voltages. 


One of the most significant aspects of 28FOOIBXflash 
memories is their capability for 100,000 erase/program 
cycles per block. Destructive oxide breakdown has been 
a limiting factor in extended cycling of thin oxide 
EEPROMs. 
Intel's ETOX flash memory technology 
extends cycling performance through: 


• Improved 
tunnel oxide processing that increases 


charge carrying capability tenfold; 
• Reduced oxide area under stress minimizing proba- 
bility of oxide defects in the region; and 
• Reduced oxide stress due to a lower peak electric 
field (lower erase voltage than EEPROM). 


A typical cell erase/program margin (VU is shown as a 
function of reprogramming cycles in Figure 9. After 
100,000 reprograming 
cycles, a 2.5V program 
read 
margin exists, ensuring reliable data retention. 
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tight Vt distribution. The maximum erased Vt is set to 
3.2V via the internal erase algorithm and erase verify 
circuits. Superior oxide quality gives an erased Vt dis- 
tribution 
width that improves slightly with cycling 
(Figure 10). The tight erase Vt distribution gives an 
order of magnitude of erase time margin to the fastest 
erasing cell. 


Intel's ETOX flash memory technology is a break- 
through in adding electrical chip-erasure to high-densi- 
ty EPROM technology. Intel's 28FOOIBX family en- 
hances Intel's standard flash memory line by adding 
block erase capability, Write State Machine-controlled 
program and erase and deep powerdown mode. Micro- 
processor-compatible specifications, straightforward in- 
terfacing and in-circuit selective alterability using sim- 
ple software command sequences allow designers to 
easily augment memory flexibility and satisfy the need 
for nonvolatile storage in today's designs. 
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Array 
Organization 
Left 
Half Array 
Right 
Half Array 


100 101 102 lOa 
104 10s 106 107 
(Main Block): 
BLs11 +- Bl&4 
Bl&4 -- 
BLS11 


Address 
Bltlines 


A16 
A1S 
A14 
A1a 
A12 
A1 
Ao 
100&107 
101 & 106 
102& 
10s 
10a& 
104 


0 
0 
0 
0 
0 
0 
0 
B400 
BL288 
BL176 
BLa4 


0 
0 
0 
0 
0 
0 
1 
B401 
BL289 
BL177 
BLas 
0 
0 
0 
0 
0 
1 
0 
B402 
BL290 
BL178 
BLa6 
0 
0 
0 
0 
0 
1 
1 
BL403 
BL291 
BL179 
BLa7 


0 
0 
0 
0 
1 
0 
0 
B404 
BL292 
BL180 
BLa8 


0 
0 
0 
0 
1 
0 
1 
BL40S 
BL293 
BL181 
BLa9 


0 
0 
0 
0 
1 
1 
0 
B406 
BL294 
BL182 
BL70 


0 
0 
0 
0 
1 
1 
1 
BL407 
BL29S 
BL183 
BL71 


• 
• 
• 
• 
• 
• 
• 
. 
• 
• 
• 


1 
1 
0 
1 
1 
0 
0 
BLs08 
BL396 
BL284 
BL172 
1 
1 
0 
1 
1 
0 
1 
BLs09 
BL397 
BL28S 
BL173 
1 
1 
0 
1 
1 
1 
0 
BLs10 
BL398 
BL286 
BL174 
1 
1 
0 
1 
1 
1 
1 
BLs11 
BL399 
BL287 
BL17S 


Array 
Organization 
Right 
Half Array 


1°0-1°7 
(Parameter 
Block 
1): 
BLa -- 
BL31 


Address 
Bltlines 


A16 
A1S 
A14 
A13 
A12 
A1 
Ao 
100 
101 
102 
lOa 
104 
10s 
106 
107 


1 
1 
1 
0 
0 
0 
0 
BLo 
BL4 
BL8 
BL12 
BL16 
BL20 
BL24 
BL28 
1 
1 
1 
0 
0 
0 
1 
BL1 
BLs 
BL9 
BL13 
BL17 
BL21 
BL2S 
BL29 
1 
1 
1 
0 
0 
1 
0 
BL2 
BLa 
BL10 
BL14 
BL18 
BL22 
BL26 
BL30 
1 
1 
1 
0 
0 
1 
1 
BL3 
BL7 
BL11 
BL1S 
BL19 
BL23 
BL27 
BL31 


Array 
Organization 
Right 
Half Array 


1°0-1°7 
(Parameter 
Block 
2): 
BL32 -- 
Bl&3 


Address 
Bltlines 


A16 
A1S 
A14 
A13 
A12 
A1 
Ao 
100 
101 
102 
lOa 
104 
10s 
106 
107 


1 
1 
1 
0 
1 
0 
0 
BL32 
BL36 
BL40 
B44 
BL48 
BLs2 
BLs6 
BLao 


1 
1 
1 
0 
1 
0 
1 
BL33 
BL37 
B41 
B4s 
B49 
BLs3 
BLs7 
BLa1 
1 
1 
1 
0 
1 
1 
0 
BL34 
BL38 
B42 
B46 
BLso 
BLs4 
BLs8 
BLa2 


1 
1 
1 
0 
1 
1 
1 
BL3S 
BL39 
B43 
B47 
BLs1 
BLss 
BLs9 
BLa3 


NOTES: 
1. Bitline decoding listed is for 28F001BX-T. To convert to 28F001BX·B, invert polarity of addresses A16-A12 (i.e. 0000000 
becomes 1111100). 


Array 
Organization 
Left 
Half Array 


1°7-1°0 
(Boot 
Block): 
BLo-+B43 


Address 
Bltllnes 


A16 
A1S 
A14 
A13 
A12 
A1 
Ao 
107 
106 
105 
104 
103 
102 
101 
100 
1 
1 
1 
1 
0 
0 
0 
BLo 
BL8 
BL16 
BL24 
BL32 
B40 
B48 
BL56 
1 
1 
1 
1 
0 
0 
1 
BLl 
BL9 
BL17 
BL25 
BL33 
B41 
B49 
BL57 
1 
1 
1 
1 
0 
1 
0 
BL2 
BL10 
BL18 
BL26 
BL34 
B42 
BL50 
BL58 
1 
1 
1 
1 
0 
1 
1 
BL3 
BLll 
BL19 
BL27 
BL35 
B43 
BLsl 
BL59 
1 
1 
1 
1 
1 
0 
0 
B4 
BL12 
BL20 
BL28 
BL36 
BL44 
BL52 
B40 
1 
1 
1 
1 
1 
0 
1 
BL5 
BL13 
BL21 
BL29 
BL37 
B45 
BL53 
BLsl 
1 
1 
1 
1 
1 
1 
0 
BLs 
BL14 
BL22 
BL30 
BL38 
BL46 
BL54 
BLs2 
1 
1 
1 
1 
1 
1 
1 
BL7 
BL15 
BL23 
BL31 
BL39 
BL47 
BL55 
BLs3 


NOTE: 
1. Bitline decoding listed is for 28F001BX-T. To convert to 28F001BX-B. invert polarity of addresses A16-A12 (i.e. 0000000 
becomes 1111100). 


X Address 
Row 


A11 
Al0 
Ag 
As 
A7 
As 
As 
A4 
A3 
A2 
WL 


0 
0 
0 
0 
0 
0 
O. 
0 
0 
0 
XLo 
0 
0 
0 
0 
0 
0 
0 
0 
0 
1 
XLl 
0 
0 
0 
0 
0 
0 
0 
0 
1 
0 
XL2 
0 
0 
0 
0 
0 
0 
0 
0 
1 
1 
XL3 
0 
0 
0 
0 
0 
0 
0 
1 
0 
0 
X4 
0 
0 
0 
0 
0 
0 
0 
1 
0 
1 
XL5 
0 
0 
0 
0 
0 
0 
0 
1 
1 
0 
XLs 
0 
0 
0 
0 
0 
0 
0 
1 
1 
1 
XL7 
0 
0 
0 
0 
0 
0 
1 
0 
0 
0 
XLe 
0 
0 
0 
0 
0 
0 
1 
0 
0 
1 
XL9 
0 
0 
0 
0 
0 
0 
1 
0 
1 
0 
XLlO 
0 
0 
0 
0 
0 
0 
1 
0 
1 
1 
XLll 
0 
0 
0 
0 
0 
0 
1 
1 
0 
0 
XL12 
0 
0 
0 
0 
0 
0 
1 
1 
0 
1 
XL13 
0 
0 
0 
0 
0 
0 
1 
1 
1 
0 
XL14 
0 
0 
0 
0 
0 
0 
1 
1 
1 
1 
XL15 
0 
0 
0 
0 
0 
1 
1 
1 
1 
1 
XL16 
0 
0 
0 
0 
0 
1 
1 
1 
1 
0 
XL17 
0 
0 
0 
0 
0 
1 
1 
1 
0 
1 
XL18 
0 
0 
0 
0 
0 
1 
1 
1 
0 
0 
XL19 
0 
0 
0 
0 
0 
1 
1 
0 
1 
1 
XL20 
0 
0 
0 
0 
0 
1 
1 
0 
1 
0 
XL21 
0 
0 
0 
0 
0 
1 
1 
0 
0 
1 
XL22 
0 
0 
0 
0 
0 
1 
1 
0 
0 
0 
XL23 
0 
0 
0 
0 
0 
1 
0 
1 
1 
1 
XL24 
0 
0 
0 
0 
0 
1 
0 
1 
1 
0 
XL25 
0 
0 
0 
0 
0 
1 
0 
1 
0 
1 
XL26 
0 
0 
0 
0 
0 
1 
0 
1 
0 
0 
XL27 
0 
0 
0 
0 
0 
1 
0 
0 
1 
1 
XL28 
0 
0 
0 
0 
0 
1 
0 
0 
1 
0 
XL29 
0 
0 
0 
0 
0 
1 
0 
0 
0 
1 
XL30 
0 
0 
0 
0 
0 
1 
0 
0 
0 
0 
XL31 


X Address 
Row 


All 
Al0 
Ag 
AS 
A7 
As 
As 
A4 
A3 
A2 
WL 


0 
0 
0 
0 
1 
0 
0 
0 
0 
0 
XL32 
· 
· 
• 
• 
• 
• 
• 
· 
· 
• 
••• 


0 
0 
0 
0 
1 
0 
1 
1 
1 
1 
X47 


0 
0 
0 
0 
1 
1 
1 
1 
1 
1 
X4a 
• 
• 
• 
• 
• 
• 
• 
• 
• 
• 
••• 


0 
0 
0 
0 
1 
1 
0 
0 
0 
0 
XLs3 


0 
0 
0 
1 
0 
0 
0 
0 
0 
0 
Xls4 
• 
• 
• 
• 
• 
• 
• 
• 
• 
• 
••• 


0 
0 
0 
1 
0 
0 
1 
1 
1 
1 
XL79 


0 
0 
0 
1 
0 
1 
1 
1 
1 
1 
XLao 
• 
• 
• 
• 
• 
• 
• 
• 
• 
• 
••• 


0 
0 
0 
1 
0 
1 
0 
0 
0 
0 
XL95 


1 
1 
1 
1 
1 
0 
0 
0 
0 
0 
XL992 
• 
• 
• 
• 
• 
• 
• 
• 
• 
• 
••• 


1 
1 
1 
1 
1 
0 
1 
1 
1 
1 
XL1007 


1 
1 
1 
1 
1 
1 
1 
1 
1 
1 
XL100a 
• 
• 
• 
• 
• 
• 
• 
• 
• 
• 
••• 


1 
1 
1 
1 
1 
1 
0 
0 
0 
0 
XL1023 
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002 
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Figures 9 and 10 
Added Figure 11 


003 
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to RP# 
for JEDEC standard 
compatibility. 
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The ETOX III (EPROM tunnel oxide) 2/4-Mbit fami- 
ly of Intel boot block Flash Memories are a continua- 
tion of boot-top and boot-bottom architectures first in- 
troduced in the I-Mbit 28FooIBX-T and 28FooIBX-B 
devices. Top (-T) and bottom (-B) boot block offerings 
provide compatibility 
for microprocessors 
that boot 
from high or low memory addresses. 


All versions of this new family provide a 16-Kbyte 
hardware-protected boot block, two 8-Kbyte parameter 
blocks and a 96-Kbyte main block. The 2-Mbit prod- 
ucts have an additional 128-Kbyte main block, while 
4-Mbit offerings contain three additional 
l28-Kbyte 
main blocks. 


Flash memories combine inherent non-volatility with 
in-system alterability of device contents. Selective block 
erasure allows manipulation 
of data contents within 
one of the seven (or five) mini-array segments without 
affecting data stored in the other six (or four). Ad- 
vances in process control have allowed development of 
a double-polysilicon single-transistor flash memory ca- 
pable of 100,000 write/erase 
cycles per block. The 
214-Mbit boot block family electrically erases all bits in 
a block via electron tunneling. The EPROM program- 
ming mechanism of hot-electron injection is employed 
for high-performance electrical wordlbyte write as re- 
quired for computing and embedded applications. 


An integrated Command User Interface (CUI) simpli- 
fies microprocessor control of device operations (word/ 
byte write, block erase, erase suspend/resume, 
Status 
Register read/clear, 
array read and device identifier 
read). The internal Write State Machine (WSM) con- 
trols all functions and circuits associated with word/ 
byte-write and block-erase operations, including pulse 
widths and repetition, timeout delays, erase precondi- 
tioning and margined verifications. The WSM continu- 
ally updates the internal Status Register during these 
functions. 
The Status Register 
is read via outputs 


DQo- DQ7 providing feedback of WSM activities. 


The CUI and Status Register interface to power-up/ 
down-protection circuitry, address/data latches and the 
WSM. This interface augments first-generation flash 
memory circuitry to optimize Intel's 2/4-Mbit 
boot 
block family for microprocessor-controlled 
word/byte 
write and block erase. 


A deep-power-down mode enables extremely low pow- 
er consumption to augment reduced-power standby op- 
eration. An automatic power savings feature reduces 
ICC during read mode. 


A 60 ns access time (tACc) results from a memory cell 
current of approximately 70 /LA, low-resistance polysil- 
icide wordlines strapped with metal, advanced scaled 
periphery transistors and improved circuit techniques. 


The dense one-transistor cell structure, coupled with 
high array efficiency, yields a 4-Mbit die measuring 295 
by 331 mils and a 2-Mbit die measuring 295 by 221 
mils. 


Intel's 28F400BX is a 4,194,304-bit non-volatile memo- 
ry organized as either 262,144 words (256K x 16) or 
524,288 bytes (512K x 8). A dedicated BYTE# control 
input provides selection of the desired input/output 
(I/O) configuration (either xl6 or x8) for read opera- 
tions and data writes. 


Intel's 28F2ooBX is a 2,097,I52-bit non-volatile memo- 
ry organized as either 131,072 words (128K x 16) or 
262,144 bytes (256K x 8). This device also provides 
BYTE# control of I/O configuration. 


The 28F400BX and 28F200BX are available in the 44- 
lead Plastic Small Outline Package (PSOP) and the 56- 
lead Thin Small Outline Package (TSOP). 


Intel's 28FOO4BXis a 4,194,304-bit non-volatile memo- 
ry arranged 
as 524,288 bytes (512K 
x 8). Intel's 
28F002BX is a 2,097,152-bit non-volatile memory ar- 
ranged as 262,144 bytes (256K x 8). 


With lower pin counts compared to their x8/x16 equiv- 
alents, the 28FOO4BXand 28F002BX allow housing in 
the smaller 4O-leadTSOP. 


Intel's ETOX III Flash Memory technology incorpo- 
rates advances from ETOX I and ETOX II processes, 
and leverages over two decades of EPROM manufac- 
turing experience. Using advanced 0.8 /Lm double-poly- 
silicon N-well/P-well CMOS technology, the 214-Mbit 
boot block flash memories employ a 2.5 /Lm x 2.9 /Lm 
single-transistor cell affording array density equivalent 
to comparable EPROM technology, and twice that of 
Intel's ETOX II process. The ETOX III flash memory 
cell is identical to 0.8 /Lm EPROM, except for an addi- 
tional source implant which optimizes erase perform- 
ance. Figure I shows a cross-section of the flash memo- 
ry cell. 
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High-quality 
tunnel oxide under the single floating 


polysilicon gate promotes electrical erasure. All cells 
within the selected block are simultaneously erased via 
Fowler-Nordheim 
tunneling. Applying l2V to block 


source junctions and grounding the select gates erases 
all cells within that block. The internal WSM controls 
the automated 
block-erase algorithm, including pre- 


erase conditioning (i.e. pre-programming all block bits) 
and margin verification, in response to user requests 
relayed by the CUI. WSM-controlled block erasure, in- 
cluding pre-programming, typically ranges from 1.0 to 
2.4 seconds depending on the size of the block selected. 


Word/byte 
write is accomplished with the standard 
EPROM mechanism of channel hot-electron injection 
from the cell drain junction to the floating gate. Bring- 
ing both the select gate and the cell drain to high volt- 
age initiates programming. The WSM regulates the in- 
ternal 
word/byte-write 
algorithm, 
including 
margin 


verification, after the correct command sequence is 
written and decoded. Word/byte 
write typically re- 


quires 9 fLs. 


Array Organization 


Layout of the 214-Mbit boot block family is segmented 
as two array planes (see Figure 2). This organization 
allows improved access times via minimal internal bus- 
ing, thus balancing the need for high speed with the 
requirement of small die size for cost-effective solu- 
tions. In the 4-Mbit family, each array plane is 1024 
rows by 2048 columns. For the 2-Mbit family, each 
array plane is 1024 rows by 1024 columns. Access time 


is reduced by limiting column length to 1024 cells. The 
polysilicon row is strapped in metal every 512 colum~s 
to reduce wordline delay. Two row decoders run vertI- 
cally along the array plane sides, and column decoders 
run horizontally between array planes. Figure 36 shows 
a die photo of the 4-Mbit family. 


Each array plane is divided into eight I/Os 
for the 


28F400BX/200BX. 
The upper plane consists of the 


high-byte I/Os (DQs-DQIS)' 
while the lower pl~ne 


consists of the low-byte I/Os 
(DQo-DQ7)' 
Dunng 


byte-wide operation (BYTE# 
= "0") the high-byte 


I/Os are multiplexed through the low-byte I/Os via 
A_I decoding. Data for 1/00 is stored in the left-most 
256 columns (or 128 columns for the 28F200BX) of the 
lower plane, with the next 256 columns (or 128) storing 
data for I/O \>etc. Data for I/Os is stored in the left- 
most 256 (or 128) columns of the upper plane, with the 
next 256 (or 128) columns storing data for 1/09, etc. 


For the dedicated 
byte-wide products 
(28FOO4BX/ 


002BX), data for a given I/O is divided between the 
upper and lower array planes as decoded by AW' Data 
for 1/°0 is stored in the left-most 256 columns (or 128 
columns for the 28FOO2BX)of both the upper and low- 
er planes, with the next 256 columns (or 128) in each 
plane storing data for I/O\> etc. 


Since each I/O is a grouping of adjacent columns (256 
or 128), the independently-erasable 
blocks (seven or 


five) are segmented within each I/O. Each I/O in the 
4-Mbit family is divided into seven blocks; including a 
l6-Kbyte boot block, two 8-Kbyte parameter blocks, 
one 96-Kbyte main block and three l28-Kbyte main 
blocks. Each I/O in the 2-Mbit family is divided into 
five blocks; including a l6-Kbyte 
boot block, two 


8-Kbyte parameter blocks, one 96-Kbyte main block 
and one l28-Kbyte main block. Each block source is 
electrically isolated from the sources of the other six (or 
four) blocks. This allows individual block erase without 
altering data in the other blocks. 


Addresses A9-Ao select one of 1024 rows. Row ad- 
dress lines are decoded sequentially for selection. Table 
3 lists row address bitmaps. 


Columns are decoded by Als-AW 
for the 28FOO4BX, 


AI7-Aw 
for the 28F400BX and 28FOO2BX,and A16- 
Aw 
for the 28F200BX. 4-Mbit family columns are 


numbered 0-255 for each I/O, and 2-Mbit columns are 
numbered 0-127 for each I/O. Table 4 and 5 lists col- 
umn address bitmaps. 
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I/O 8 
I/O 9 
I/O 10 
I/o 11 
I/O 12 
I/O 13 
I/O 14 
I/O 15 


(I/O 0)· 
(I/o 1)· 
(I/O 2)· 
(I/O 3)· 
(I/O 4)· 
(I/O 5)· 
(I/O 6)· 
(I/O 7)· 


I/O a 
I/O 1 
I/O 2 
I/O 3 
I/O 4 
I/O 5 
I/O 6 
I/O 7 


(I/o 0)" 
(I/O 1)· 
(I/O 2)· 
(I/o 3)· 
(I/O 4)· 
(I/O 5)· 
(I/o 6)· 
(I/O 7)· 


Top (-T) and bottom (-B) boot block offerings have 
block address maps which are inverted from one anoth- 
er to provide compatibility for microprocessors that 
boot from high or low memory addresses. Figures 3, 4, 
5 
and 
6 
show 
28F400BX-TIB, 
28F200BX-TIB, 


28FOO4BX-TIB and 28FOO2BX-T/B memory maps. 
The addresses shown in Figures 
3 and 4 for the 
28F400BX-TIB and 28F200BX-TIB, decode two bytes 
of data. A-I decodes between the two bytes when 
BYTE# 
is low. 


Intel's 2/4-Mbit boot block Flash Memories contain an 
on-chip Command 
User Interface. Write State Ma- 
chine, Status Register and address/data 
latches to dra- 
matically simplify user interface. This combination of 
functional 
units 
reduces 
microprocessor 
control 


complexity of wordlbyte-write 
block-erase, erase-sus- 
pend/resume, 
Status Register-read/clear, 
ID-read and 


array-read 
operations. 
Figures 
7 
and 
8 
show 


28F400BXI200BX and 28FOO4BX/OO2BXblock dia- 
grams. 


The CUI consists of a command decoder and command 
register. User requests are decoded and latched in a 
microprocessor write cycle controlled by Chip Enable 
(CE#) 
and Write Enable (WE#). 
Status Register- 


read/clear, 
ID-read and array-read commands are di- 


rectly handled by the CUI. The CUI also accepts 
wordlbyte-write, 
block-erase 
and 
erase-suspend/re- 
sume commands. WE#'s 
rising edge latches address, 


command and data-in registers, and requests WSM ini- 
tiation of the selected operation. These on-chip address, 
command and data latches, controlled by the CUI, 
minimize system interface logic and free the system 
bus. 
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The WSM processes word/byte-write, 
block-erase and 
erase-suspend/resume 
requests received from the CUI. 


The WSM rejects word/byte-write 
and block-erase re- 
quests if the WSM is currently busy, if Vpp is not at 
high voltage (12V) or if the Low Vpp Status Register 
flag is set (i.e. not cleared from a previous low-voltage 
condition). 


The WSM consists of an integrated oscillator and con- 
trol circuitry. It generates signals which control the 
word/byte-write, 
block-erase, 
erase-suspend/resume 


and verify circuits. It also receives feedback from these 
circuits, allowing Status Register updates. The WSM 
and associated circuits perform the equivalent of first- 
generation flash memory program and bulk-erase algo- 
rithms automatically. 


This eliminates the need for system timers, and frees 
the microprocessor 
to service interrupts 
or perform 


other 
functions 
during 
device 
word/byte-write 
or 


block-erase operations. 


The WSM provides feedback to the CUI to determine 
when a given command is valid. Although nearly all 
commands are available when the WSM is inactive, 
only status read is valid while the WSM performs a 
word/byte-write 
operation. During block erase, only 


the read-status and erase-suspend commands are avail- 
able. Read-array, read-status, and erase-resume com- 
mands are valid with the WSM in an erase-suspended 
state. Invalid operations are interpreted as the read-ar- 
ray command when the WSM is inactive or erase sus- 
pended, and as the read-status 
command when the 


WSM is active in word/byte write or block erase. 


The internal Status Register contains a full complement 
of activity status bits. These bits and their meaning, 
"I/O" are: 
SR.?: WSM status (READY/BUSY#) 
SR.6: Erase-suspend status (ERASE SUSPENDED/ 


ERASE IN PROGRESS # or 
COMPLETED#) 


SR.5: Block-erase status (ERROR/SUCCESS#) 
SR.4: Wordlbyte-write 
status (ERROR/SUCCESS#) 


SR.3: Vpp status (LOW/OK#) 


All bits are set by the WSM, and read via the CUI. The 
WSM can only set SR.3, SR.4 and SR.5; it cannot clear 
them. They remain set until the CUI processes a clear 
Status Register command. There are two reasons for 
operating in this fashion. First is synchronization; the 
WSM does not know when the host CPU has read the 
Status Register, therefore does not know when to clear 
it. 
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Secondly, allowing system software to control reset 
adds flexibility to the way this device may be used. The 
CPU may write several wordslbytes, 
or erase several 


blocks back-to-back, while polling SR.? to determine 
when the next wordlbyte-write 
or block-erase com- 


mand can be given. When all wordslbytes are written, 
or all blocks erased, the system polls the other status 
flags to determine if all operations were successful, or if 
an error occurred. While other approaches require the 
controlling microprocessor to watch for non-comple- 
tion of write or erase within a specified time to indicate 
an error, this implementation requires no external sys- 
tem timers or software timing loops. As such, the sys- 
tem can reduce its polling overhead while still identify- 
ing any potential error conditions. 


Status Register contents are driven to device outputs on 
the falling edge of CE# 
or Output Enable (OE#), 


whichever occurs last in the read cycle. CE# or OE# 
must be toggled to update Status Register contents. 
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The WSM is designed using clocked logic circuits. An 
on-chip ring oscillator generates the clock signals. The 
frequency of a standard ring oscillator varies with pro- 
cessing, temperature and supply voltage. A proven de- 
sign used on the 
28FOOlBX-T/B, 
28FOO8SA and 


214-Mbit boot block family minimizes these variations. 


The switching current of each stage in the ring oscilla- 
tor is controlled by a current reference which varies 
linearly with Vee. The trip point of each ring oscillator 
inverter also varies linearly with Vee. These two effects 
offset each other, and the resulting oscillator period is 
proportional to RC with only a small dependence on 
Vee· 


An on-chip resistor sets the value of R. The gate capac- 
itance of the inverters in the ring oscillator sets the 
value of C. Process variations in these values are re- 
duced by trimming the period of each oscillator during 
manufacturing. The resistor is the only source of tem- 
perature variation. 
. 


Supply Voltage Sensing 


Figure 9 shows the LOWVee 
and LOWVpp genera- 


tion circuits. Power supply voltages (Vee and Vpp) are 
divided down and compared to a reference voltage. If 
VREF is greater than the divided power supply voltage, 
the LOWVee or LOWVpp signal is driven high. The 
generated VREF level is supply-voltage independent to 
the first order. 


Positive power to the circuit is supplied by Ml and M2. 
Ml and M2 sources are pulled up to the higher of 
(Vpp - 
Vtn>or (Vee - 
Vtw)' Vtn is the threshold of 
an implanted N-channel device, about 0.9V. Vtw is the 
threshold of a native N-channel device, about OV.This 
scheme ensures that the circuit works regardless of the 
applied supply voltages. 


The LOWVee signal is used by the wordlbyte-write 
and block-erase circuits, as well as the CUI and WSM. 


If LOWVee is active, the CUI will not accept user 
writes and resets to an array-read condition. The WSM 
is similarly reset by LOWVee. The LOWVpp signal is 
used by the WSM; if Vpp drops below the high-voltage 
detector trip point during wordlbyte 
write or block 
erase, the Status Register's low Vpp bit is set and WSM 
operation halts. The system must clear the Status Reg- 
ister before any subsequent wordlbyte-write 
or block- 
erase operations can succeed. 


Deep Power-Down 
and Device Reset 


The 214-Mbit boot block family incorporates a deep- 
power-down mode that reduces Ice and Ipp to typical- 
ly 0.20 fJ-Aand 0.07 fJ-Arespectively. RP# 
low selects 


deep power-down. When RP# 
is high, the device can 
be placed in an active or standby mode depending on 
CE# state. 


Deep power-down is similar to standby except that all 
circuits excluding the RP # buffer are turned off. This 
mode greatly reduces power consumption, but requires 
more time to transition the device into an active mode. 
A read wake-up time (tPHQV) is required from RP# 
switching high until output and sense circuitry become 
fully functional and data can be read from the part. 
Similarly, a write wake-up time (tpHWL) is needed be- 
fore the CUI recognizes writes. After this interval nor- 
mal operation is restored; the CUI is reset to read-array 
mode and the Status Register is cleared to 80H. 


Figure 10 shows a diagram of the power-down circuit. 
The TTL buffer formed by M 1-M3 disables the low- 
power detect circuits, the redundancy-address flash bits 
and the CE# 
TTL buffer formed by M4-M6. 
These 


circuits were always enabled in first-generation Intel 
flash architectures. Turn-on delays of these circuits de- 
termine RP II access time and write specifications. 


RP /I functions properly with TIL-Ievel inputs. How- 
ever, to attain lowest possible power consumption, full 
CMOS levels must be used. If the voltage on the gate of 
M3 rises above its 0.9V threshold, M3 will turn on and 
draw current. Input voltages in the 0.7V-0.9V range 
could cause enough current conduction in M3 to ex- 
ceed the Ice deep-power-down current (IceD) specifi- 
cation. This is why RP/I's input voltage is specified as 
GND ±0.2V. 


RP /I also functions as a hardware reset to the WSM 
and CUI. If RP /I is driven low ("0") during wordlbyte 
write, block erase, or erase suspend, that operation is 
aborted leaving the addressed memory locations in an 
unknown state. The Status Register is cleared, and CUI 
is set to array read. The aborted operation (wordlbyte 
write or block erase) must be repeated with RP/I inac- 
tive to obtain a valid condition in the memory array. 


RP /I reset should be restricted to system reset only (as 
in the case of power supply failure), and should not be 
used as a standard means to terminate wordlbyte-write 
or block-erase operations. NOTE: Use the erase-sus- 
pend command to read another block (see the "Erase 
SuspendlResume" 
section). 


This use of RP /I during system reset is important with 
automated write/erase devices. When the system comes 
out of reset it expects to read from the flash memory. 
Automated flash memories provide status information 
when accessed during write/erase 
modes. If a CPU re- 
set occurs with no flash memory reset, proper CPU 
initialization would not occur because the flash memo- 
ry would be providing the status information instead of 
array data. Intel's Flash Memories allow proper CPU 
initialization following a system reset through the use 
of the RP /I input. 
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The 2/4-Mbit boot block flash memories include an 
automatic power-savings feature that reduces Ice dur- 
ing read mode. Within one access time (tAee or teE> 
after an address or CE/I switches, Ice automatically 
powers down from the 60 mA Ice CMOS specification 
(or 65 mA TIL 
specification) to less than I mA. Ice 


remains below I mA until either CE/I or an address is 
switched, or until the device is taken out of read mode. 
This feature provides significant power savings for ap- 
plications that access the device slower than their speci- 
fied read access times. 


Block erasure is achieved by a two-step write sequence. 
The erase-setup code is written to the CUI in the first 
cycle. Erase confirm is written in the second cycle. The 
address supplied with the erase-confirm command is 
latched and decoded internally by the device; erase is 
subsequently enabled in that block. The second WE/I 
rising edge initiates the operation 
(WE /I -controlled 


write). 


The WSM triggers the high-voltage flash-erase switch 
connecting the 12V supply to the source of all bits in 
the specified block, while all wordlines are grounded. 
Figure 
12 shows organization 
of the block source 


switches. Fowler-Nordheim tunneling results in simul- 
taneous erasure of all bits in the selected block. 


The block source switch (shown in Figure II) controls 
the source voltage of all bits in a particular block. Dur- 
ing block erase, M2 is off and MI pulls the source to 
Vpp. When not in erase, MI is off and M2 pulls the 
source to ground. The high-voltage latch formed by 
M4-M7 
converts the low-voltage ERASE signal to a 


high-voltage signal that controls Ml. 
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The tunneling that occurs during block erase requires 
only a small amount of current. However, the initial 
current 
required 
to charge the block's 
cumulative 
source capacitance to the erase voltage is large. Supply 
decoupling design practices minimize the system im- 
pact of the source charging. 


The LOWVcc signal protects the array from erasure 
when Vpp is at a high voltage, but Vcc is below the 
write/erase lockout voitage (VLKO)' When this occurs, 
M3 pulls the block source to ground. The high-voltage 
latch is forced by M8 into the state that turns MI off. 


Vpp is continually monitored during all phases of the 
block-erase operation. If Vpp falls below the trip point 
of its high-voltage detect circuitry, erasure will not oc- 
cur (or haits) and Status Register Vpp status (SR.3), 
block-erase status (SR.5) and WSM status (SR.7) bits 
are set to "I". 


If SR.3 is set (Low Vpp), WSM operation is inhibited. 
The WSM will not execute further wordlbyte-write or 
block-erasure sequences until the Status Register has 
been reset by system software. Wordlbyte-write 
or 
block-erase requests with error flags SR.4 or SR.5 set 
are not inhibited, but the system loses the ability to 
determine success. The clear Status-Register command 
resets these bits. 


After receiving the block-erase command sequence, the 
WSM automatically controls block pre-condition (pro- 
gramming all words to OOOOHwithin the chosen block), 
erase pulses and pulse repetition, timeout delays, and 
word-by-word verification of all block addresses (se- 
quentially checked via the address counter) using an 
alternative sensing reference to verify margin. The in- 
ternal erase and verify operations continue until the en- 
tire block is erased. A read cycle applied to the part 
following the block-erase command sequence outputs 
Status Register contents; system software can poll the 
Status Register to determine when block erase has suc- 
cessfully completed. Following block erasure, the de- 
vice remains in Status Register read block erasure, the 
device remains in Status Register read mode; a read-ar- 
ray command must be written to the device to access 
array data. 


If the erase-setup command is followed with a com- 
mand other than erase confirm, the device will not 
erase. The WSM sets both word/byte-write 
status and 
block-erase status bits in the Status Register to indicate 
an invalid sequence, 
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Erase suspend allows the system to interrupt 
block 
erase to read data from another array block. The ability 
to suspend erase and read data from another block of- 
fers the flexibility required for embedded applications. 
Upon receiving the erase-suspend command. the CUI 
requests that the WSM pause at one of several predeter- 
mined points in the algorithm. Upon reaching a sus- 
pend point, the WSM sets SR.6 (erase-suspend status) 
and SR.7 to "I". The system must poll the Status Reg- 
ister to determine if the suspend has been processed or 
the block erase has actually completed. Block-erase 
completion is indicated by SR.6 cleared to "0" and 
SR.7 set to "I". Read bus cycles default to Status Reg- 
ister read after issuing the erase-suspend command. 


Once suspended, the WSM asserts a signal to the CUI 
which allows response to the read-array, read-status, 
and erase-resume commands. The system can write the 
read-array 
command allowing read access to blocks 
other than that which is suspended. The WSM contin- 
ues to run, idling in a suspended state, regardless of all 
control inputs except RP#. 
RP# 
driven low immedi- 


ately shuts down the WSM, aborting the suspended 
erase operation. 


The erase-resume command must be issued upon com- 
pletion of reads from other array blocks to continue 
block-erase operation. The WSM then clears SR.6 and 
SR.7, and resumes erase operation from the suspension 
point. Read cycles following the erase-resume com- 
mand output Status Register data. 


Word/byte write follows a flow similar to block erase. 
The wordlbyte-write-setup 
command is first written to 
the CUI. A second write cycle loads address and data 
latches. The rising edge of the second WE# 
pulse re- 
quests that the WSM initiate activity, applying high 
voltage to the gates and drains of all bits to be written. 
Unlike block erase, word/byte 
write will proceed re- 
gardless of what data is applied on the second CUI 
write cycle; however writing data FFFFH 
(or FFH) 
does not modify memory contents. 


Like block erase, the WSM controls program pulses 
and pulse repetition, timeout delays and word/byte ver- 
ification. Word/byte 
write and verify (with alternate 


sensing reference and internally-generated verify volt- 
age) continue until the word/byte is written. Internal 
word/byte-write 
verify checks that all bits written to 
zero have been correctly modified; it does not check 


intel~ 


bits specified as one. Wordlbyte 
write cannot change 


existing zeros to ones; this can only be accomplished by 
erase. 


Read bus cycles following word/byte-write 
operations 


output Status Register data. System software, polling 
the Status Register, is informed of status through bits 
SR.3, SR.4, and SR.7. The read-array command must 
be written to the CUI following word/byte 
write to 


access array data. 


In a scenario similar to that described under block era- 
sure, word/byte write does not occur (or halts) ifVpp is 
detected low. In such a case SR.3, SR.4, and SR.7 are 
set high, and no further writes can take place until the 
Status Register is cleared by the Clear Status Register 
command. 


Figures 14 through 35 show graphs of several device 
parameters as a function of temperature 
and supply 


voltage. 


In particular, note Figure 14 which shows typical read 
performance tAvQv (tAcd 
of the 28F400BX, which is 


representative of the 2/4-MBit boot block flash memo- 
ry family, as a function of Vcc and ambient tempera- 
ture. tELQV (teE> in Figure 15 and toLQV (toE> in 
Figure 16 are also of particular interest. Access times 
tAVQV,tELQV,and tGLQVare specified and tested with 
an output load of 100 pF; decreased output load capaci- 
tance improves device operation. 


Table I shows typical supply currents for several oper- 
ating modes. 


Ice 


Mode 
(Vee = 5.0V, 
Ipp 
CMOS Inputs) 
(Vpp = 12V) 


x8 
x16 


Read (6 MHz) 
23mA 
25mA 
100/LA 


Write 
20mA 
22mA 
10 mA 


Block Erase 
15mA 
15 mA 
12 mA 


Standby 
50/LA 
50/LA 
100/LA 


Deep Power-Down 
0.20/LA 
0.2O/LA 
0.07/LA 


The system designer may be concerned with power con- 
sumption during block erase and word/byte write. Fig- 
ure 32 shows Ice and Ipp during block erase. Figure 33 
shows Ice and Ipp during word/byte write. 


Word/Byte-Write 
and Block-Erase 
Times 


The 2/4-Mbit 
boot block family and 28F008SA ad- 


vance word/byte-write 
and block-erase performance 


compared to previous flash memories. The on-chip al- 
gorithm is improved over the 28FOOIBXto take advan- 
tage of process enhancements. 
This improvement 
is 
most apparent when compared to fIrst-generation flash 
memory parts with externally controlled algorithms. 
First-generation device times shown in Table 2 assume 
optimal system overhead, and as such are absolute best 
case. 


Word/Byte-Write 
and Block-Erase 
Cycling 


One of the most important 
reliability aspects of the 


2/4-Mbit boot block family is its capability of 100,000 
write/erase cycles per block. Destructive oxide break- 
down has been a limiting factor in extended cycling of 
thin-oxide EEPROMs. 
Intel's ETOX Flash Memory 


technology extends cycling performance through: 


• Improved 
tunnel-oxide 
processing 
that 
increases 


charge-carrying capability tenfold. 


• SignifIcantly reduced oxide area under stress that 


minimizes probability of oxide defects in the region. 


• Reduced oxide stress due to a lower peak electric 


fIeld (lower erase voltage than EEPROM). 


Table 2. Word/Byte-Write 
and Block-Erase 
Performance 
vs Previous 
Devices 


Device 
Word/Byte- 
Block-Erase 
Erase Time 
Write Time 
Time/4I 
Bytes 
per Kbyte 


SECOND-GENERATION 
FLASH MEMORY 
DEVICES(1) 


28F400BX 
91J.s 
2.4s/128KB 
19 ms 


28FOO4BX 
91J.s 
2.2s/96KB 
23ms 


28F200BX 
91J.s 
1.0s/16KB 
63ms 


28FOO2BX 
91J.s 
1.0s/8KB 
125 ms 


28FOO8SA 
91J.s 
1.5s/64KB 
23 ms 


28FOO1BX 
181J.s 
3.8s/112KB 
34ms 
2.1s/8KB 
256 ms 
2.1s/4KB 
513 ms 


FIRST·GENERATION 
FLASH MEMORY 
DEVICES(2) 


28F020 
16.51J.s 
6.8s/256KB 
27ms 


28F010 
16.51J.s 
3.9s/128KB 
30ms 


28F512 
16.51J.s 
2.4s/64KB 
37ms 


28F256A 
16.51J.s 
1.6s/32KB 
51 ms 


NOTES: 
1. Typicalmeasured time. 
2. Times calculated based on typicalerase and preconditionpulse requirements, 
withminimumwritetimings.Calculationsare described in Figure13. 


l'..t:uaoll: 
worO/Dyte-wnre ana Dlock-erase cyclmg re- 
quires proper selection of the maximum erase threshold 
voltage (VJ, and maintenance of a tight distribution. 
Maximum erase Vt is set to 3.4V via the internal block- 
erase algorithm and verify circuits. Tight erase Vt dis- 
tribution 
gives an order of magnitude of erase-time 
margin to the fastest erasing cell, with virtually identi- 
cal erase Vt distributions at I and 10,000 cycles (Figure 
34). Program Vt distribution is similarly consistent over 
cycling (Figure 35). 


The 
214-Mbit 
boot 
block family offers protection 
against accidental block erasure or word/byte 
write 


during power transitions. Internal circuitry creates a 
device insensitive to VpplV cc supply power-up/down 
sequencing. 


Vpp 
$: VPPLMAX locks out word/byte-write 
and 


block-erase circuits. Vcc 
$: VLKO disables CUI com- 


mand writes, resets the CUI to array-read mode, and 
holds the WSM inactive. The system designer must still 
guard against spurious command writes for Vcc 
> 
VLKO when Vpp < VPPLMAX. 


Several strategies are available to prevent data modifi- 
cation in the 2/4-Mbit family. The CUI provides a de- 
gree of software write protection since memory altera- 
tion occurs only after successful completion of a two- 
step write sequence. WE# and CE# must both go ac- 
tive to perform this sequence; driving either high inhib- 
its command/data 
writes. Secondly, the system can 


place the device in deep-power-down mode (RP # = 
VlL) to disable command writes, reset the CUI to ar- 
ray-read mode, and hold the WSM inactive, effectively 
protecting array data and providing a way to reset the 
flash memory during system reset conditions. Finally, 
the system designer may switch Vpp to VPPH when 
memory updates are required. 


Intel's 214-Mbit boot block Flash Memory family con- 
tains features that optimize this product group for com- 
puting and embedded applications. These features in- 
clude hardware-implemented 
write/erase protection of 


the boot block, specialized array blocking, dedicated 
x8 and x8/16 user-configurable versions, automation 
of word/byte write and block erase, erase suspend for 
data read, deep-power-<iown/automatic-power-savings 
modes, reset capability, and a write/erase Status Regis- 
ter. With simple microprocessor interfacing and soft- 
ware command sequences, this family is the non-vola- 
tile computing and embedded solution of choice for to- 
day's designs. 


Related documents of interest to readers of this engi- 
neering report: 


28F400BX-TIB, 28F004BX-TIB; "4-Mbit Flash Mem- 
ory Family" Data Sheet (Order #290450) 


28F400BX-TLIBL, 28FOO4BX-TLIBL; "4-Mbit Flash 
Memory Family" Data Sheet (Order #290451) 


28F200BX-TIB, 28FOO2BX-TIB; "2-Mbit Flash Mem- 
ory Family" Data Sheet (Order #290448) 


28F200BX-TLIBL, 28FOO2BX-TLIBL; "2-Mbit Flash 
Memory Family" Data Sheet (Order #290449) 


ER-28 "ETOX III Flash Memory Technology" Engi- 
neering Report (Order #294012) 


AP-34l 
"Designing an Updatable BIOS Using Flash 


Memory" (Order #292077) 


AP-363 "Extended Flash BIOS for Portable Comput- 
ers" (Order #292098) 


FORMULA: 
b = 
# bytes in a block (256K, 128K, 64K, 32K) 
n = 
# of erase pulses required (90 pulses) 


w = Time for a write cycle (150 ns, tAVAV) 
v = 
Time to verify (6055 ns, tWHGL + toLQV) 


p = 
Program pulse width (10 ,""S, tWHWHl) 
one pulse programming assumed 


e = 
Erase pulse width (10 ms, tWHWH2) 


Precondition and precondition verify time is: 


b (2w + P + v) 


Erase/verify, each loop where some byte 
does not pass verify: 


(n - 
1) (2w + e + v) 


Passing erase-verify, all bytes: 


b (w + v) 


Total time can be summarized as: 


b (3w + P + 2v) + n (2w + e + v) - 
(v) 


or substituting in times for write, verify, 
program and erase pulse widths: 


b (22.56 x 10-6) + n (10.006355 x 10-3) - 
(6.055 x 10-6) Seconds 


Figure 13. Erase TIme Calculations for 
Flrst-Generatlon 
Flash Memories 
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Figure 15.tELQV(teE) 
vs Vcc and Temperature 


75 


--t:r -40°C 


70 
-0- OOC 


65 
-6- 85°C 
.-;r- 100°C 


60 
en 
55 
-5 
u 
50 
u 
-< 


45 


.0 


.35 


.30 
•. 0 4.2 
•.• 
..6 
•. 8 5.0 
5.2 
5.. 
5.6 
5.8 
6.0 


Vee (v) 


Figure 14.tAVQV(tACC) 
vs VCCand Temperature 
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Figure 16.tQLQV(toE) 
vs VCCand Temperature 
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Figure 17.tOVWH(tos WE#) 
vs Vcc and Temperature 
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Figure 19. tAvwH (tAS WE#) 
vs Vcc and Temperature 
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Figure 18. tWHOX(tOHWE#) 


vs Vcc and Temperature 
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Figure 20. tWHAX(tAH WE #) 


vs Vcc and Temperature 
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Figure 
21. tOVEH (tos CE#) 
vs Vcc and Temperature 
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Figure 
23. tAVEH (tAS CE#) 
vs Vcc and Temperature 
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Figure 
22. tEHOX (toH CE # ) 


vs Vcc and Temperature 
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Figure 
24. tEHAX (tAH CE #) 


vs Vcc and Temperature 
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Figure 25. tWLWH (twp) 
vs Vcc and Temperature 
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Figure 27.IOL vs Vcc and Temperature 
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Figure 26. IOH TTL 


vs Vcc and Temperature 
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Figure 29. lee (RMS) va Frequency 
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Figure 30. lee (RMS) va Frequency 
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Figure 37. PSOP Lead Configuration 
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Figure 38. TSOP Lead Configuration 
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Columns for each block are distributed throughout the array in each 110. For the 28F400BXI200BX, each I/O 
contains 8 columns for the boot block, 4 columns each for parameter block 0 and parameter block 1,48 columns for 
main block 0 and 64 columns for each of the remaining main blocks (main block 1 for the 28F200BX and main block 
1-3 for the 28F400BX) for a total of 256 columns (28F400BX) or 128 columns (28F200BX) per output. 
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Columns for each block are distributed throughout the array in each I/O. For the 28FOO4BX/OO2BX,each I/O 
contains 16columns for the boot block, 8 columns each for parameter block 0 and parameter block I, 96 columns for 
main block 0 and 128 columns for each of the remaining main blocks (main block 1 for the 28FOO2BX)and main 
block 1-3 for the 28FOO4BXfor a total of 512 columns (28FOO4BX)or 256 columns (28FOO2BX)per output. 
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BOOT BLOCK FLASH: 
THE NEXT GE~ERATION 


Flash memory offers a whole new dimension to nonvol- 
atile memory applications because of its high density 
and cost-effectiveness. Embedded systems, such as PC 
BIOS, hard disk drive controllers and laser printers, 
were among the first applications to utilize the easy 
update capability of Flash, allowing sy~tem differentia- 
tion and upgradeability. In 1992, Intel mtroduced a ~e- 
ries of high-density Flash Memory Cards based on Its 
8-Mbit FlashFile™ 
component, products that are en- 
abling truly portable computing capability with disk- 
less, solid-state mass storage. Intel also added two flash 
memory products designed specifically to serve more 
traditional embedded and portable applications, offer- 
ing both high performance and low power consumption 
options in an architecture specifically designed for these 
applications storage requirements. 


In 
the 
four 
years since Intel 
first 
introduced 
its 
256-Kbit flash devices, the worldwide demand 
has 
quadrupled annually, with 1992 market demand fore- 
casted to exceed $270 million. Flash is expected to con- 
tinue double-digit growth t1rrough the upcoming years 
while other memory technologies are relatively flat or 
increasing only slightly. By 1994, the flash mar~et is 
expected to exceed $1 billion (Figure 1). The pnmary 
reasons for this growth are well acknowledged by cus- 
tomers: flexibility, nonvolatility, low power and cost-ef- 
fectiveness. As a result of this seemingly insatiable de- 
mand for flash, the memory density treadmill that al- 
lowed DRAMs 
and EPROMs 
to double every 18 
months, has accelerated faster than ever before. Inte~'s 
introduction of an 8-Mbit component two years after Its 
2-Mbit product is evidence of the flash memory's rapid 
advancement. 


Intel's first generation of flash devices, ranging in densi- 
ty from 256-Kbit through 2-Mbit densities, were rapid- 
ly adopted into code storage applications which former- 
ly used EPROM 
or EEPROM. 
In 1991, Intel ~ntro- 
duced the first 1-Mbit Boot Block flash memory m re- 
sponse to direct customer requests. As a result of con- 
tinuing to improve and develop an innovative and 
broad product line, Intel held an 85% share of the $130 
million 1991 market. 


Source Dataquest: January 1992 


Figure 1 


INTEL SERVING 
TWO PRIMARY 
APPLICATIONS 


Today, Intel flash is serving two major application seg- 
ments: updatable code storage and solid-state 
mass 


storage (Figure 2). Code and data storage comprise the 
updatable non-volatile memory applications 
that re- 


quire high performance, high density and easy update 
capability. These applications are infrequently upd~ted 
when compared to solid-state mass storage applica- 
tions. In this case, erase/write 
performance is not as 


critical as integration and performance requirements. 
This application segment is served effectively with full 
chip-erase or boot block products. 


The second major application segment is solid-state 
mass storage that requires very high density, automated 
programming and high performance erase/write capa- 
bility at a very low cost per bit. Erasing and writing 
portions of the code or data is much more frequent in 
solid-state mass storage than in updatable firmware ap- 
plications. 
In April 
of 1992, Intel 
i~troduc~ 
th.e 


8-Mbit FlashFile component whose architecture ISOpti- 
mized for data file storage. Its symmetrically blocked 
architecture and automated write/erase 
features gave 


programming flexibility for a high-performance, solid- 
state memory system. The compactness of an 8-Mbit 
device in a TSOP package allows for high-density flash 
arrays to be included on a system motherboard as well 


•• 


as in memory cards. Intel also offers a second genera- 
tion of flash memory cards designed to serve the porta- 
ble mass storage market that are based on the new 
8-Mbit FlashFile component. Memory cards add the 
feature of removability and system upgradability in an 
industry-standard 
PCMCIA/ExCATM 
format. While 
flash cards and FlashFile components serve solid-state 
mass storage applications directly, both can be used in 
updatable code storage applications as well. 


By developing products to fit both of these application 
segments, Intel strives to serve the needs of a broader 
base of customer applications with the best nonvolatile 
memory solutions. 


The 28FOOIBX I-Mbit Boot Block flash component in- 
troduced in June 1991 featured a sectored architecture 
that has been widely accepted in embedded code stor- 
age applications, particularly 
PC BIOS and cellular 


communications. 
Over 20 PC manufacturers 
use this 
device in their products, including Compaq, Dell and 
Zenith Data Systems. The Boot Block architecture gave 
the manufacturer 
added flexibility and the ability ~o 
differentiate. End users also benefit from the ability to 
upgrade BIOS software quickly and securely. It is pos- 
sible for the manufacturer to upload BIOS updates to 
an electronic bulletin board where the end-user gets the 
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upgrade for the price of the call. The blocked architec- 
ture allows the OEM customer to store critical system 
code securely in the boot block of the device that can 
minimally bring up the system and download to other 
locations of the device to initialize the system. The 
hardware boot locking feature guarantees that even if 
the power is disrupted during a BIOS update, the sys- 
tem will be able to recover immediately. 


The success of the I-Mbit Boot Block device has result- 
ed in over 150 designs with annual shipments to exceed 
1.5 million units worldwide in 1992. 


EXTENDING 
THE BOOT BLOCK 
PRODUCT 
LINE: 2- AND 4-MEGABIT 
FLASH DEVICES 


Once the Boot Block architecture became established in 
the marketplace, customers quickly began to ask for 
more features and enhancements: speed, density, low 
power, surface-mount options and an industry-standard 
upgrade path. These requests were based on the need to 
expand features in portable computing and communi- 
cation products. 


The 2-Mbit 28F2OOBXand 4-Mbit 28F400BX are In- 
tel's newest additions to the flash Boot Block product 
line. These products offer 60 ns performance, two sur- 
face-mount packages, and a Boot Block architecture 
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similar to the l-Mbit Boot Block device: one lockable 
Boot Block, two parameter blocks, and the balance of 
the device is divided into main blocks. The Boot Block 
securely stores the basic boot code required to initialize 
the system that can be protected by the hardware-lock- 
ing feature, ensuring basic system operating code pro- 
tection. The two parameter blocks can be used for a 
variety of purposes: manufacturing product code, setup 
parameters and storing frequently updated data such as 
system 
diagnostics. 
The 
28F200BX 
contains 
one 
16 Kbyte Boot Block, two 8 Kbyte parameter blocks, 
one 96 Kbyte and one 128 Kbyte main block (Figure 
3a). The 28F400BX contains all of the blocks of the 
28F200BX plus two additiona1l28 
Kbyte main blocks 


(Figure 3b). Top and bottom Boot Block versions are 
available for both densities. Both devices are in the 
x16/x8 
user-selectable organization 
of the industry- 


standard, 
ROM-compatible 
pin-out in 44-lead PSOP 


surface mount package. This pinout and package allow 
an easy upgrade from 2-Mbit to 4-Mbit since only one 
address is added at the top of the device package. For- 
ty-lead TSOP x8-only versions are also available for 
both of these devices, providing high density in the 
smallest form factor. A 56-lead TSOP x16/x8 version 
will be available for applications requiring x16 organi- 
zation in a TSOP package. 


1EOOOH 


1DFFFH 


1DOOOH 


1CFFFH 


1COOOH 


1BFFFH 


Notebook computer manufacturers today are compet- 
ing to produce the lightest weight, slimmest and longest 
battery life products possible. Minimizing board size 
via reduced chip count is the first improvement the new 
flash devices provide. BIOS in portable systems has 
grown beyond the 
l-Mbit 
density to accommodate 


more sophisticated power management and additional 
system features, such as PCMCIA card slots. For ex- 
ample, the i386TMSL architecture allows the expansion 
of BIOS beyond 128 Kbytes (l-Mbit) with internal reg- 
isters for hardware paging. A new generation of BIOS 
support for low-power portable computers has been de- 
veloped by SystemSoft and other vendors which sup- 
ports the 28F200BX and the 28F400BX. In PC BIOS 
applications, the main blocks of the Boot Block devices 
are used for power management code, video drivers, 
and ROM-executable code, such as MS-DOS·. The ar- 
rangement 
of the blocks for PC BIOS applications 


based on Intel i386 and i486TMmicroprocessors is with 
the Boot Block on top. Other microprocessors and mi- 
crocontrollers, such as the Intel 80960KX/SX and the 
Motorola 68000 series, use the bottom Boot Block ver- 
sion of the memory map. Many PC manufacturers have 
also moved to a x16 organization of their BIOS for 
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higher performance and are using 2-Mbit flash compo- 
nents in parallel to accomplish xl6 performance. Other 
manufacturers have decided to forego xl6 and use the 
l-Mbit Boot Block and a l-Mbit bulk-erase 28FOIO 
flash memory to contain their power management code. 
The 28F200BX solves both of these problems in a com- 
pact, single-chip solution. The 28F400BX provides a 
higher density solution for high performance systems 
today, as well as a future upgrade for systems currently 
requiring only 2 megabits. 


APPLICATION 
REQUIREMENTS- 


TELECOMMUNICATIONS/EMBEDDED 


Similar to personal computers, cellular telephone appli- 
cations use the hardware-lockable block to store basic 
initialization code to wake up the system and establish 
basic communication with the host base station. The 
small parameter blocks are ideal for frequently updated 
code such as the user's phone directory, re-dial and the 
activation code necessary to enable user-desired fea- 
tures. The main block contains the code for dynamical- 
ly managing the cellular communications and executing 
the voice algorithms. The density requirement for the 
main code storage has increased significantly in recent 
years with the conversion to digital cellular transmis- 
sion, particularly in Europe and Japan. Most cellular 
designs execute code directly from ROM rather than 
downloading to RAM. Typical microcontrollers used 
are: Intel 8OC186,Zilog Z8080 and Siemens 80166, all 
operating in the 8 MHz-13 
MHz range. The Motorola 
68000 series l6-bit microcontrollers used in some digi- 
tal cellular designs utilize the x16 and high speed capa- 
bilities of these new Boot Block devices. Flash access 
times ranging from 75 ns to 120 ns produce 0 to 1 wait- 
state performance. The high-performance 60 ns access 
time of the 2-Mbit and 4-Mbit Boot Block flash allows 
zero wait state performance in cellular telephones and 
other embedded control applications. 


Low power has always been a strength of flash due to 
its inherent nonvolatility, a characteristic that elimi- 
nates battery drain required to maintain information 
stored in volatile RAM when the power is otToWhen 
flash is in use, its active power requirement is very low: 
typical Ice 
= 35 mA, and standby current is 0.1 mA. 


The hallmark of this newest generation of flash is low 
power and high performance. Formerly these features 
were mutually exclusive, but through advanced circuit 
development, an automated power saving feature in the 
device reduces Ice to a low DC level within one access 
time; 5 mA typical. This significant reduction of the 
active current time relates directly to the extension of 
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battery life in systems which continuously execute code 
directly from flash, such as cellular telephones and por- 
table instrumentation. 


For optimum system power conservation, future sys- 
tems are being designed today to operate at 3.3V rather 
than SV. Intel will also otTer 3.3V versions of the 
2-Mbit and 4-Mbit Boot Block devices with Ice active 
= 10 mA, and tAee performance = 150 ns. 


An alternative design approach of a "SV-only" (pro- 
gramming voltage = operating voltage = SV) flash 
memory has been proposed to eliminate the need for a 
l2V programming supply. While this proposal would 
eliminate the need for a l2V supply component in a 5V- 
only environment, it would not provide a low power 
solution as every flash component would carry the die 
size cost and power overhead of on-chip voltage pump- 
ing. Intel's approach is to first bring the operating volt- 
age to 3.3V, in line with what system designers request- 
ed as their first priority for the next generation of porta- 
ble computers and cellular phones. The focus of lower- 
ing the read voltage is also congruent with the usage 
model for embedded applications of "read often, write 
few" operation. The l2V programming voltage require- 
ment is more efficiently met with a voltage pump from 
a vendor such as Maxim. (Inexpensive voltage pumps 
for 3.3V to l2V are currently available.) The use of a 
separate voltage pump is significantly more cost-effi- 
cient in systems where more than one flash device is 
used, as cost and space is amortized over multiple de- 
vices. 


Intel continues to serve both updatable non-volatile 
memory applications as well as the rapidly emerging 
solid-state mass storage market with solutions tailored 
to meet their particular needs. The new 2-Mbit and 
4-Mbit Boot Block devices otTerhigh performance and 
low power options for updatable code applications. The 
Boot Block architecture is compatible with all major 
microprocessors and microcontrollers. As with all Intel 
flash products, their low power consumption and small 
surface mount packaging make the 2-Mbit and 4-Mbit 
Boot Block flash memories ideal for a wide variety of 
handheld portable applications. 


NOTE: 
FlashFile, ExCA, i386 and i486 SL are trademarks of 
Intel Corporation. 


OMS-DOS 
is a registered 
trademark 
of Microsoft 
Corpora- 


tion. 


Intel 2/4 Mbit Boot Block 
Flash Memory Evaluation Module 
(D,FLASHEVAL5) Product Brief 


Kit _ 
28F200BX/28F002BX 
Contents 
28F400BX/28F004BX 
Adapter 
Board with: 


• 
40-ld TSOP Socket 
• 
56-ld TSOP Socket 
• 
44-ld PSOP Socket 


_ 
5.25" Floppy 
Disk with iFlash2 
Software 
(Version 
2.4) 


_ 
Technical 
Documentation 


Describing 
Intel's 
28F200BX/ 


28FOO2BX and 28F400BXI 
28F004BX 
Flash Memory 
devices 


_ 
Flash Memory 
Evaluation 
Kit II 


Installation 
Guide and User's 
Manual 
with 28F200BX/ 


28FOO2BX/28F 400B X/28F004BX 
Adapter 
Board Installation 
Instructions 
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Intel's 28F200BX/28F002BX/28F400BX/28F004BX 
Boot Block Flash 
Memory Evaluation Module provides system designers with a cost-effective 
prototyping tool for writing and erasing this flash memory device. This 
evaluation module is a hardware adapter board upgrade to the Intel Flash 
Memory Evaluation Kit II (D, FLASHEVAL2) which supports the 2 and 4 
megabit boot block flash memories in 40-lead TSOP, 56-lead TSOP, and 
44-lead PSOP packages. 


Kit Description 


The 28F200BX/28FOO2BX/28F400BX/28FOO4BX 
Evaluation 
Module, used with 
Intel's Flash Memory Evaluation 
Kit, provides the hardware, software and system 
interface necessary to evaluate and integrate Intel's 2 and 4Mbit Boot Block Rash 
I,vlemories into your next design. 


The module provides instructions 
to install the 28F200BX/28FOO2BX/28F400BX/ 
28FOO4BX adapter board. Technical documentation 
includes 28F200BX/ 


28FOO2BX/28F400BX/28FOO4BX 
datasheets, engineering 
reports and application 
notes. Together, they provide a complete description of the technology and 
important design considerations. 
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inteJ~ 
28F020 
2048K (256K x 8) CMOS FLASH MEMORY 
• Flash Electrical Chip-Erase 
• Command Register Architecture 
for 
- 
2 Second Typical Chip-Erase 
Microprocessor /Microcontroller 
• Quick-Pulse Programming Algorithm 
Compatible Write Interface 


- 
10 JJ-sTypical Byte-Program 
• Noise Immunity Features 
- 
4 Second Chip-Program 
- 
± 10% Vcc Tolerance 
• 100,000 Erase/Program 
Cycles 
- 
Maximum Latch-Up Immunity 
through EPI Processing 
• 12.0V ± 5% Vpp 
• ETOX Nonvolatile 
Flash Technology 
• High-Performance 
Read 
- 
EPROM-Compatible Process Base 
- 
70 ns Maximum Access Time 
- 
High-Volume Manufacturing 
• CMOS Low Power Consumption 
Experience 
-10 
mA Typical Active Current 
• JEDEC-Standard Pinouts 
- 
50 JJ-ATypical Standby Current 
- 
32-Pin Plastic Dip 
- 
0 Watts Data Retention Power 
- 
32-Lead PLCC 
• Integrated 
Program/Erase 
Stop Timer 
- 
32-Lead TSOP 
(See 
Packaging 
Spec., 
Order 
# 231369) 
• Extended Temperature 
Options 


Intel's 
28F020 
CMOS 
flash 
memory 
offers 
the 
most 
cost-effective 
and 
reliable 
alternative 
for read/write 
random 
access 
nonvolatile 
memory. 
The 28F020 
adds electrical 
chip-erasure 
and reprogramming 
to familiar 
EPROM technology. 
Memory 
contents 
can be rewritten: 
in a test socket; 
in a PROM-programmer 
socket; 
on- 
board 
during 
subassembly 
test; 
in-system 
during final test; and in-system 
after-sale. 
The 28F020 
increases 
memory 
flexibility, 
while contributing 
to time-and 
cost-savings. 


The 
28F020 
is a 2048-kilobit 
nonvolatile 
memory 
organized 
as 262,144 
bytes 
of 8 bits. 
Intel's 
28F020 
is 5 


offered 
in 32-pin plastic DIP, 32-lead 
PLCC, and 32-lead TSOP packages. 
Pin assignments 
conform 
to JEDEC 
standards 
for byte-wide 
EPROMs. 


Extended 
erase and program 
cycling capability 
is designed 
into Intel's 
ETOX (EPROM 
Tunnel Oxide) process 
technology. 
Advanced 
oxide processing, 
an optimized 
tunneling 
structure, 
and lower electric 
field combine 
to 
extend 
reliable cycling 
beyond 
that of traditional 
EEPROMs. 
With the 12.0V Vpp supply, the 28F020 
performs 
100,000 erase and program 
cycles well within the time limits of the Quick-Pulse 
Programming 
and Quick-Erase 
algorithms. 


Intel's 28F020 
employs 
advanced 
CMOS circuitry 
for systems 
requiring 
high-performance 
access 
speeds, 
low 
power consumption, 
and immunity 
to noise. Its 70 nanosecond 
access time provides 
no-WAlT-state 
perform- 
ance for a wide range of microprocessors 
and microcontrollers. 
Maximum 
standby 
current 
of 100 /LA trans- 
lates into power 
savings 
when the device 
is deselected. 
Finally, the highest 
degree 
of latch-up 
protection 
is 
achieved 
through 
Intel's 
unique EPI processing. 
Prevention 
of latch-up 
is provided 
for stresses 
up to 100 mA 
on address 
and data pins, from 
-1V 
to Vcc + 1V. 


With Intel's 
ETOX process 
base, the 28F020 
levers years of EPROM experience 
to yield the highest 
levels of 
quality, 
reliability, 
and cost-effectiveness. 


CO~~AND 
REGISTER 


INTEGRATED 
STOP TI~ER 


Vcc --+ 
V 


SS 


_ 


Vpp 


Symbol 
Type 
Name and Function 


Ao-A17 
INPUT 
ADDRESS 
INPUTS for memory addresses. 
Addresses 
are internally 
latched during a write cYcle. 


DOO-D07 
INPUT /OUTPUT 
DATA INPUT/OUTPUT: 
Inputs data during memory write cycles; 
outputs data during memory read cycles. The data pins are active high 
and float to tri-state 
OFF when the chip is deselected 
or the outputs 
are disabled. 
Data is internally 
latched during a write cycle. 


CE# 
INPUT 
CHIP ENABLE: Activates 
the device's 
control 
logic, input buffers, 


decoders 
and sense amplifiers. 
CE # is active low; CE # high 


deselects 
the memory device and reduces power consumption 
to 
standby 
levels. 


OE# 
INPUT 
OUTPUT 
ENABLE: Gates the devices output through the data buffers 
during a read cycle. OE # is active low. 


WE# 
INPUT 
WRITE 
ENABLE: Controls 
writes to the control 
register and the array. 


Write enable is active low. Addresses 
are latched on the falling edge 
and data is latched on the rising edge of the WE # pulse. 
Note: With Vpp ~ 6.5V, memory contents 
cannot 
be altered. 


Vpp 
ERASE/PROGRAM 
POWER SUPPLY for writing the command 
register, erasing the entire array, or programming 
bytes in the array. 


Vcc 
DEVICE 
POWER SUPPLY (5V ± 10%) 


Vss 
GROUND 


Vcc 


WE# 


A,7 


AI. 


Al3 


AS 


Ag 


All 


OE# 


AIO 


CE# 


D~ 


DOs 


DOS 


DO. 


D03 


290245-2 
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STANDARD 
PINOUT 


E28F020 


32- 
LEAD TSOP 


Bmmx 
20mm 


TOP VIEW 


REVERSE PINOUT 


F28F020 


32-LEAO 
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Bmm 
x 20mm 
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The 28F020 flash memory provides nonvolatility 
along with the capability to perform over 100,000 
electrical chip-erasure/reprogram cycles. These fea- 
tures make the 28F020 an innovative alternative to 
disk, EEPROM, and battery-backed static RAM. 
Where periodic updates of code and data-tables are 
required, the 28F020's reprogrammability and non- 
volatility make it the obvious and ideal replacement 
for EPROM. 


Primary applications and operating systems stored 
in flash eliminate the slow disk-to-DRAM download 
process. This results in dramatic enhancement of 
performance and substantial reduction of power 
consumption - 
a consideration particularly impor- 


tant in portable equipment. Flash memory increases 
flexibility with electrical chip erasure and in-system 
update capability of operating systems and applica- 
tion code. With updatable code, system manufactur- 
ers can easily accommodate last-minute changes as 
revisions are made. 


In diskless workstations and terminals, network traf- 
fic reduces to a minimum and systems are instant- 
on. Reliability exceeds that of electromechanical 
media. Often in these environments, power interrup- 
tions force extended re-boot periods for all net- 
worked terminals. This mishap is no longer an issue 
if boot code, operating systems, communication pro- 
tocols and primary applications are flash-resident in 
each terminal. 


For embedded systems that rely on dynamic RAM/ 
disk for main system memory or nonvolatile backup 
storage, the 28F020 flash memory offers a solid 
state alternative in a minimal form factor. The 
28F020 provides higher performance, lower power 
consumption, instant-on capability, and allows an 
"execute in place" memory hierarchy for code and 
data table reading. Additionally, the flash memory is 
more rugged and reliable in harsh environments 
where extreme temperatures and shock can cause 
disk-based systems to fail. 


The need for code updates pervades all phases of a 
system's life - 
from prototyping to system manufac- 
ture to after-sale service. The electrical chip-erasure 
and reprogramming ability of the 28F020 allows in- 
circuit alterability; this eliminates unnecessary han- 
dling and less-reliable socketed connections, while 
adding greater test, manufacture, and update flexi- 
bility. 


Material and labor costs 
associated with 
code 


changes increases at higher levels of system inte- 
gration - 
the most costly being code updates after 


sale. Code "bugs", or the desire to augment system 
functionality, prompt after-sale code updates. Field 
revisions to EPROM-based code requires the re- 
movalof EPROM components or entire boards. With 
the 28F020, code updates are implemented locally 
via an edge-connector, or remotely over a commun- 
cations link. 


For systems currently using a high-density static 
RAM/battery 
configuration for data accumulation, 


flash memory's inherent nonvolatility eliminates the 
need for battery backup. The concern for battery 
failure no longer exists, an important consideration 
for portable equipment and medical instruments, 
both requiring continuous performance. In addition, 
flash memory offers a considerable cost advantage 
over static RAM. 


Flash memory's electrical chip erasure, byte pro- 
grammability and complete nonvolatility fit well with 
data accumulation and recording needs. Electrical 
chip-erasure gives the designer a "blank slate" in 
which to log or record data. Data can be periodically 
off-loaded for analysis and the flash memory erased 
producing a new "blank slate". 


A high degree of on-chip feature integration simpli- 
fies memory-to-processor interfacing. Figure 4 de- 
picts two 28F020s tied to the 80C186 system bus. 
The 28F020's architecture minimizes interface cir- 
cuitry needed for complete in-circuit updates of 
memory contents. 


The outstanding feature of the TSOP (Thin Small 
Outline Package) is the 1.2 mm thickness. With stan- 
dard and reverse pin configurations, TSOP reduces 
the number of board layers and overall volume nec- 
essary to layout multiple 28F020s. TSOP is particu- 
larly suited for portable equipment and applications 
requiring large amounts of flash memory. Figure 3 
illustrates the TSOP Serpentine layout. 


With cost-effective in-system reprogramming, ex- 
tended cycling capability, and true nonvolatility, 
the 28F020 offers advantages to the alternatives: 
EPROMs, EEPROMs, battery backed static RAM, 
or disk. EPROM-compatible read specifications, 
straight-forward interfacing, and in-circuit alterability 
offers designers unlimited flexibility to meet the high 
standards of today's designs. 
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Flash-memory 
augments 
EPROM 
functionality 
with 


in-circuit 
electrical 
erasure 
and reprogramming. 
The 
28F020 
introduces 
a command 
register 
to manage 
this new functionality. 
The command 
register 
allows 


for: 100% TTL-Ievel 
control 
inputs; fixed power sup- 


plies 
during 
erasure 
and 
programming; 
and 
maxi- 
mum EPROM 
compatibility. 


In the absence 
of high voltage 
on the Vpp pin, the 


28F020 
is a read-only 
memory. 
Manipulation 
of the 


external 
memory-control 
pins 
yields 
the 
standard 
EPROM 
read, 
standby, 
output 
disable, 
and 
Intelli- 


gent Identifier 
operations. 


The same EPROM read, standby, 
and output disable 


operations 
are available 
when 
high voltage 
is ap- 


plied to the Vpp pin. In addition, 
high voltage 
on Vpp 


enables 
erasure 
and programming 
of the device. All 


functions 
associated 
with 
altering 
memory 
con- 


tents-Intelligent 
Identifier, 
erase, erase verify, pro- 


gram, 
and 
program 
verify-are 
accessed 
via 
the 


command 
register. 


Commands 
are written to the register using standard 


microprocessor 
write 
timings. 
Register 
contents 


serve 
as input 
to an internal 
state-machine 
which 


controls 
the erase and programming 
circuitry. 
Write 


cycles 
also 
internally 
latch 
addresses 
and 
data 


needed 
for programming 
or erase 
operations. 
With 


the 
appropriate 
command 
written 
to 
the 
register, 


standard 
microprocessor 
read timings 
output 
array 


data, access 
the Intelligent 
Identifier 
codes, 
or out- 


put data for erase and program 
verification. 


Successive 
command 
write 
cycles 
define 
the dura- 


tions of program 
and erase operations; 
specifically, 


the 
program 
or erase 
time 
durations 
are 
normally 


terminated 
by associated 
program 
or erase 
verify 


commands. 
An integrated 
stop timer provides 
simpli- 


fied timing control 
over these operations; 
thus elimi- 


nating the need for maximum 
program/erase 
timing 


specifications. 
Programming 
and erase 
pulse dura- 


tions are minimums 
only. When the stop timer termi- 


nates a program 
or erase operation, 
the device 
en- 


ters an inactive 
state 
and remains 
inactive 
until re- 


ceiving the appropriate 
verify or reset command. 


The command 
register 
is only active when Vpp is at 


high voltage. 
Depending 
upon 
the 
application, 
the 


system 
designer 
may choose 
to make the Vpp pow- 


er supply 
switchable-available 
only when 
memory 


updates 
are desired. 
When 
Vpp 
= VpPL, the con- 


tents 
of the register 
default 
to the read command, 


making 
the 
28F020 
a read-only 
memory. 
In this 


mode, the memory 
contents 
cannot 
be altered. 


Pins 
Vpp(1) 
Ao 
Ag 
CE# 
OE# 
WE# 
DQO-DQ7 
Operation 


Read 
VPPL 
Ao 
Ag 
VIL 
VIL 
VIH 
Data Out 


Output Disable 
VPPL 
X 
X 
VIL 
VIH 
VIH 
Tri-State 


READ-ONLY 
Standby 
VPPL 
X 
X 
VIH 
X 
X 
Tri-State 


Intelligent 
Identifier 
(Mfr)(2) 
VPPL 
VIL 
VID(3) 
VIL 
VIL 
VIH 
Data = 89H 


Intelligent 
Identifier 
(Device)(2) 
VPPL 
VIH 
VID(3) 
VIL 
VIL 
VIH 
Data = SOH 


Read 
VPPH 
Ao 
Ag 
VIL 
VIL 
VIH 
Data Out(4) 


READ/WRITE 
Output 
Disable 
VPPH 
X 
X 
VIL 
VIH 
VIH 
Tri-State 


Standby(S) 
VPPH 
X 
X 
VIH 
X 
X 
Tri-State 


Write 
VPPH 
Ao 
Ag 
VIL 
VIH 
VIL 
Data In(6) 


NOTES: 
1. Refer to DC Characteristics. When Vpp = VPPLmemory contents can be read but not written or erased. 
2. Manufacturer and device codes may also be accessed via a command register write sequence. Refer to Table 3. All other 
addresses low. 
3. VIOis the Intelligent Identifier high voltage. Refer to DC Characteristics. 
4. Read operations with VPP = VPPHmay access array data or the Intelligent Identifier codes. 
5. With VPPat high voltage, the standby current equals Ice + Ipp (standby). 
6. Refer to Table 3 for valid Data-In during a write operation. 
7. X can be VIL or VIH. 


Or, the system 
designer 
may choose 
to "hardwire" 
Vpp, 
making 
the 
high 
voltage 
supply 
constantly 
available. 
In this case, all Command 
Register 
func- 
tions are inhibited 
whenever 
Vcc is below the write 
lockout 
voltage 
VLKO. (See Power Up/Down 
Protec- 
tion.) The 28F020 
is designed 
to accommodate 
ei- 
ther design 
practice, 
and to encourage 
optimization 
of the processor-memory 
interface. 


The two step program/ erase write sequence 
to the 
Command 
Register 
provides 
additional 
software 
write protection. 


Read 


The 28F020 
has two control 
functions, 
both of which 
must 
be logically 
active, 
to obtain 
data at the out- 
puts. 
Chip-Enable 
(CE#) 
is the 
power 
control 
and 
should 
be used for device 
selection. 
Output-Enable 
(OE #) 
is the 
output 
control 
and 
should 
be 
used 
to gate 
data from 
the output 
pins, 
independent 
of 
device 
selection. 
Refer 
to 
AC 
read 
timing 
waveforms. 


When Vpp is high (VPPH), the read operation 
can be 
used to access 
array data, to output 
the Intelligent 
Identifier 
codes, 
and to access 
data 
for program/ 
5 


erase verification. 
When Vpp is low (Vppu, 
the read 
operation 
can only access 
the array data. 


Output 
Disable 


With Output-Enable 
at a logic-high 
level (VIH), output 
from the device 
is disabled. 
Output 
pins are placed 
in a high-impedance 
state. 


Standby 


With Chip-Enable 
at a logic-high 
level, the standby 
operation 
disables 
most 
of the 
28F020's 
circuitry 
and 
substantially 
reduces 
device 
power 
consump- 
tion. 
The 
outputs 
are placed 
in a high-impedance 
state, 
independent 
of 
the 
Output-Enable 
signal. 


If the 
28F020 
is deselected 
during 
erasure, 
pro- 
gramming, 
or 
program/erase 
verification, 
the 
device 
draws 
active 
current 
until 
the 
operation 
is 
terminated. 


Intelligent 
Identifier 
Operation 


The Intelligent 
Identifier 
operation 
outputs 
the manu- 
facturer 
code 
(89H) 
and 
device 
code 
(SOH). 
Pro- 
gramming 
equipment 
automatically 
matches 
the de- 


vice 
with 
its proper 
erase 
and 
programming 
algo- 


rithms. 


With Chip-Enable 
and Output-Enable 
at a logic low 


level, raising A9 to high voltage 
VID (see DC Charac- 


teristics) 
activates 
the operation. 
Data read from lo- 


cations 
OOOOHand 0001 H represent 
the 
manufac- 


turer's 
code and the device 
code, respectively. 


The 
manufacturer- 
and 
device-codes 
can 
also 
be 


read via the command 
register, 
for instances 
where 
the 28F020 
is erased 
and reprogrammed 
in the tar- 


get system. 
Following 
a write 
of 90H to the com- 


mand register, 
a read from address 
location 
OOOOH 


outputs 
the manufacturer 
code 
(89H). A read from 


address 
0001 H outputs 
the device 
code (SOH). 


Write 


Device erasure 
and programming 
are accomplished 


via the command 
register, 
when high voltage 
is ap- 
plied 
to the 
Vpp pin. The 
contents 
of the 
register 


serve 
as input 
to the 
internal 
state-machine. 
The 
state-machine 
outputs 
dictate 
the 
function 
of the 
device. 


The command 
register 
itself does not occupy 
an ad- 


dressable 
memory 
location. 
The register 
is a latch 


used to store the command, 
along with address 
and 
data information 
needed 
to execute 
the command. 


The command 
register 
is written 
by bringing 
Write- 


Enable to a logic-low 
level (V,u, while Chip-Enable 
is 


low. Addresses 
are latched 
on the falling 
edge 
of 


Write-Enable, 
while 
data 
is latched 
on 
the 
rising 


edge of the Write-Enable 
pulse. Standard 
microproc- 


essor write timings 
are used. 


Refer 
to AC Write 
Characteristics 
and the 
Erase/ 


Programming 
Waveforms 
for 
specific 
timing 


parameters. 


When low voltage 
is applied to the VPP pin, the con- 


tents 
of the command 
register 
default 
to OOH, en- 


abling read-only 
operations. 


Placing 
high voltage 
on the Vpp pin enables 
read/ 


write operations. 
Device 
operations 
are selected 
by 


writing specific 
data patterns 
into the command 
reg- 


ister. 
Table 
3 
defines 
these 
28F020 
register 


commands. 


Bus 
First Bus Cycle 
Second Bus Cycle 
Command 
Cycles 
Req'd 
Operatlon(1) 
Address(2) 
Oata(3) Operatlon(1) 
Address(2) 
Oata(3) 


Read Memory 
1 
Write 
X 
OOH 


Read Intelligent Identifier Codes(4) 
3 
Write 
X 
90H 
Read 
(4) 
(4) 


Set-up Erase/Erase(5) 
2 
Write 
X 
20H 
Write 
X 
20H 


Erase Verify(5) 
2 
Write 
EA 
AOH 
Read 
X 
EVO 


Set-up Program/Program(6) 
2 
Write 
X 
40H 
Write 
PA 
PO 


Program Verify(6) 
2 
Write 
X 
COH 
Read 
X 
PVO 


Resetl?) 
2 
Write 
X 
FFH 
Write 
X 
FFH 


NOTES: 
1. Bus operations are defined in Table 2. 
2. IA = Identifier address: OOHfor manufacturer code, 01H for device code. 
EA = Address of memory location to be read during erase verify. 
PA = Address of memory location to be programmed. 
Addresses are latched on the falling edge of the Write-Enable pulse. 
3. ID = Data read from location IA during device identification (Mfr = 89H, Device = BDH). 
EVD = Data read from location EA during erase verify. 
PD = Data to be programmed at location PA. Data is latched on the rising edge of Write-Enable. 
PVD = Data read from location PA during program verify. PA is latched on the Program command. 
4. Following the Read Intelligent ID command, two read operations access manufacturer and device codes. 
5. Figure 6 illustrates the Quick-Erase Algorithm. 
6. Figure 5 illustrates the Quick-Pulse Programming Algorithm. 
7. The second bus cycle must be followed by the desired command register write. 


While Vpp is high, for erasure and programming, 
memory contents can be accessed via the read 
command. The read operation is initiated by writing 
OOH into the command register. Microprocessor 
read cycles retrieve array data. The device remains 
enabled for reads until the command register con- 
tents are altered. 


The default contents of the register upon Vpp pow- 
er-up is OOH.This default value ensures that no spu- 
rious alteration of memory contents occurs during 
the Vpp power transition. Where the Vpp supply is 
hard-wired to the 28F020, the device powers-up and 
remains enabled for reads until the command-regis- 
ter contents are changed. Refer to the AC Read 
Characteristics and Waveforms for specific timing 
parameters. 


Intelligent 
Identifier 
Command 


Flash-memories are intended for use in applications 
where the local CPU alters memory contents. As 
such, manufacturer- and device-codes must be ac- 
cessible while the device resides in the target sys- 
tem. PROM programmers typically access signature 
codes by raising A9 to a high voltage. However, mul- 
tiplexing high voltage onto address lines is not a de- 
sired system-design practice. 


The 28F020 contains an Intelligent Identifier opera- 
tion to supplement traditional PROM-programming 
methodology. The operation is initiated by writing 
90H into the command register. Following the com- 
mand write, a read cycle from address OOOOHre- 
trieves the manufacturer code of 89H. A read cycle 
from address 0001H returns the device code of 
SOH. To terminate the operation, it is necessary to 
write another valid command into the register. 


Set-up 
Erase/Erase 
Commands 


Set-up Erase is a command-only operation that 
stages the device for electrical erasure of all bytes in 
the array. The set-up erase operation is performed 
by writing 20H to the command register. 


To commence chip-erasure, the erase command 
(20H) must again be written to the register. The 
erase operation begins with the rising edge of the 
Write-Enable pulse and terminates with the rising 
edge of the next Write-Enable pulse (Le., Erase-Veri- 
fy Command). 


This two-step sequence of set-up followed byexecu- 
tion ensures that memory contents are not acciden- 
tally erased. Also, chip-erasure can only occur when 
high voltage is applied to the Vpp pin. In the absence 


of this high voltage, memory contents are protected 
against erasure. Refer to AC Erase Characteristics 
and Waveforms for specific timing parameters. 


Erase-Verify 
Command 


The erase command erases all bytes of the array in 
parallel. After each erase operation, all bytes must 
be verified. The erase verify operation is initiated by 
writing AOHinto the command register. The address 
for the byte to be verified must be supplied as it is 
latched on the falling edge of the Write-Enable 
pulse. The register write terminates the erase opera- 
tion with the rising edge of its Write-Enable pulse. 


The 28F020 applies an internally-generated margin 
voltage to the addressed byte. Reading FFH from 
the addressed byte indicates that all bits in the byte 
are erased. 


The erase-verify command must be written to the 
command register prior to each byte verification to 
latch its address. The process continues for each 
byte in the array until a byte does not return FFH 
data, or the last address is accessed. 


In the case where the data read is not FFH, another 
erase operation is performed. (Refer to 
Set-up 


Erase/Erase). Verification then resumes from the 
address of the last-verified byte. Once all bytes in 
the array have been verified, the erase step is com- 5 
plete. The device can be programmed. At this point, 
the verify operation is terminated by writing a valid 
command (e.g. Program Set-up) to the command 
register. Figure 6, the Quick-Erase algorithm, illus- 
trates how commands and bus operations are com- 
bined to perform electrical erasure of the 28F020. 
Refer to AC Erase Characteristics and Waveforms 
for specific timing parameters. 


Set-up 
Program/Program 
Commands 


Set-up program is a command-only operation that 
stages the device for byte programming. Writing 40H 
into the command register performs the set-up 
operation. 


Once the program set-up operation is performed, 
the next Write-Enable pulse causes a transition to 
an active programming operation. Addresses are in- 
ternally latched on the falling edge of the Write-En- 
able pulse. Data is internally latched on the rising 
edge of the Write-Enable pulse. The rising edge of 
Write-Enable also begins the programming opera- 
tion. The programming operation terminates with the 
next rising edge of Write-Enable, used to write the 
program-verify command. Refer to AC Programming 
Characteristics and Waveforms for specific timing 
parameters. 


The 28F020 is programmed on a byte-by-byte basis. 
Byte programming may occur sequentially or at ran- 
dom. Following each programming operation, the 
byte just programmed must be verified. 


The program-verify operation is initiated by writing 
COH into the command register. The register write 
terminates the programming operation with the ris- 
ing edge of its Write-Enable pulse. The program-ver- 
ify operation stages the device for verification of the 
byte last programmed. No new address information 
is latched. 


The 28F020 applies an internally-generated margin 
voltage to the byte. A microprocessor read cycle 
outputs the data. A successful comparison between 
the programmed byte and true data means that the 
byte is successfully programmed. Programming then 
proceeds to the next desired byte location. Figure 5, 
the 28F020 Quick-Pulse Programming algorithm, il- 
lustrates how commands are combined with bus op- 
erations to perform byte programming. Refer to AC 
Programming Characteristics and Waveforms for 
specific timing parameters. 


A reset command is provided as a means to safely 
abort the erase- or program-command sequences. 
Following either set-up command (erase or program) 
with two consecutive writes of FFH will safely abort 
the operation. Memory contents will not be altered. 
A valid command must then be written to place the 
device in the desired state. 


EEPROM cycling failures have always concerned 
users. The high electrical field required by thin oxide 
EEPROMs for tunneling can literally tear apart the 
oxide at defect regions. To combat this, some sup- 
pliers have implemented redundancy schemes, re- 
ducing cycling failures to insignificant levels. Howev- 
er, redundancy requires that cell size be doubled- 
an expensive solution. 


Intel has designed extended cycling capability into 
its ETOX flash memory technology. Resulting im- 
provements in cycling reliability come without in- 
creasing memory cell size or complexity. First, an 
advanced tunnel oxide increases the charge carry- 
ing ability ten-fold. Second, the oxide area per cell 
subjected to the tunneling electric field is one-tenth 
that of common EEPROMs, minimizingthe probabili- 
ty of oxide defects in the region. Finally, the peak 
electric 
field 
during 
erasure 
is 
approximately 


2 MV/cm lower than EEPROM. The lower electric 


IItllU yrtlauy reouces oXloesuess ana me prooaolllty 
of failur&-increasing 
time to wearout by a factor of 


100,000,000. 


The 28F020 is capable of 100,000 program/erase 
cycles. The device is programmed and erased using 
Intel's Quick-Pulse Programming and Quick-Erase 
algorithms. Intel's algorithmic approach uses a se- 
ries of operations (pulses), along with byte verifica- 
tion, to completely and reliably erase and program 
the device. 


The Quick-Pulse Programming algorithm uses pro- 
gramming operations of 10 ,...S duration. Each opera- 
tion is followed by a byte verification to determine 
when the addressed byte has been successfully pro- 
grammed. The algorithm allows for up to 25 pro- 
gramming operations per byte, although most bytes 
verify on the first or second operation. The entire 
sequence of programming and byte verification is 
performed with Vpp at high voltage. Figure 5 illus- 
trates the Quick-Pulse Programming algorithm. 


Intel's Quick-Erase algorithm yields fast and reliable 
electrical erasure of memory contents. The algo- 
rithm employs a closed-loop flow, similar to the 
Quick-Pulse Programming algorithm, 
to 
simulta- 


neously remove charge from all bits in the array. 


Erasure begins with a read of memory contents. The 
28F020 is erased when shipped from the factory. 
Reading FFH data from the device would immedi- 
ately be followed by device programming. 


For devices being erased and reprogrammed, uni- 
form and reliable erasure is ensured by first pro- 
gramming all bits in the device to their charged state 
(Data = OOH). This is accomplished, using the 
Quick-Pulse Programming algorithm, 
in approxi- 


mately four seconds. 


Erase execution then continues with an initial erase 
operation. Erase verification (data = FFH) begins at 
address OOOOHand continues through the array to 
the last address, or until data other than FFH is en- 
countered. With each erase operation, an increasing 
number of bytes verify to the erased state. Erase 
efficiency may be improved by storing the address of 
the last byte verified in a register. Following the next 
erase operation, verification starts at that stored ad- 
dress location. Erasure typically occurs in two sec- 
onds. Figure 6 illustrates the Quick-Erase algorithm. 


NOTES: 
1. See 
DC Characteristics 
for the 
value 
of VpPH and 


VPPL· 
2. Program 
Verify 
is only performed 
after byte program- 
ming. A final read/compare 
may be performed 
(option- 
al) after the register 
is written 
with the Read command. 


Bus 
Command 
Comments 
Operation 


Standby 
Wait for Vpp Ramp to VPPH(1) 


Initialize 
Pulse-Count 


Write 
Set-up 
Data = 40H 
Program 


Write 
Program 
Valid Address/Data 


Standby 
Duration 
of Program 


Operation 
(tWHWH1) 


Write 
Program(2) 
Data = COH; Stops 
Program 


Verify 
Operation(3) 


Standby 
tWHGL 


Read 
Read Byte to Verify 
Programming 


Standby 
Compare 
Data Output to Data 


Expected 


Write 
Read 
Data = OOH, Resets 
the 


Register 
for Read Operations 


Standby 
Wait for Vpp Ramp to VppL<1) 


3. Refer to principles 
of operation. 


4. CAUTION: 
The 
algorithm 
MUST BE FOLLOWED 


to 
ensure 
proper 
and 
reliable 
operation 
of 
the 
de- 


vice. 


• 


290245-8 


1. See 
DC Characteristics 
for the 
value 
of VPPH and 


VpPL· 
2. Erase 
Verify 
is performed 
only 
after 
chip-erasure. 
A 


final 
read/compare 
may be performed 
(optional) 
after 


the register 
is written 
with the read command. 


intel~ 


Bus 
Command 
Comments 
Operation 


Entire Memory 
Must = OOH 
Before 
Erasure 


Use Quick-Pulse 
Programming 
Algorithm 
(Figure 5) 


Standby 
Wait for Vpp Ramp to VPPH(1) 


Initialize Addresses 
and 
Pulse-Count 


Write 
Set-up 
Data = 20H 


Erase 


Write 
Erase 
Data = 20H 


Standby 
Duration 
of Erase Operation 


(tWHWH2) 


Write 
Erase(2) 
Addr = Byte to Verify; 


Verify 
Data = AOH; Stops 
Erase 


Operation(3) 


Standby 
tWHGL 


Read 
Read Byte to Verify Erasure 


Standby 
Compare 
Output to FFH 
Increment 
Pulse-Count 


Write 
Read 
Data = OOH, Resets 
the 
Register 
for Read Operations 


Standby 
Wait for Vpp Ramp to VppL<1) 


3. Refer to principles 
of operation. 


4. CAUTION: 
The 
algorithm 
MUST 
BE 
FOllOWED 
to 
ensure 
proper 
and 
reliable 
operation 
of 
the 
de- 


vice. 


intel~ 


Two-Line 
Output Control 


Flash-memories 
are often used in'larger 
memory 
ar- 
rays. 
Intel 
provides 
two 
read-control 
inputs 
to ac- 
commodate 
multiple 
memory 
connections. 
Two-line 
control 
provides 
for: 


a. the 
lowest 
possible 
memory 
power 
dissipation 
and, 
b. complete 
assurance 
that 
output 
bus contention 
will not occur. 


To efficiently 
use these 
two control 
inputs, 
an ad- 
dress-decoder 
output 
should 
drive 
chip-enable, 
while 
the 
system's 
read 
signal 
controls 
all flash- 
memories 
and other parallel memories. 
This assures 
that only enabled 
memory 
devices 
have active 
out- 
puts, 
while 
deselected 
devices 
maintain 
the 
low 
power 
standby 
condition. 


Flash-memory 
power-switching 
characteristics 
re- 
quire 
careful 
device 
decoupling. 
System 
designers 
are interested 
in three 
supply current (Icd issues- 


standby, 
active, 
and 
transient 
current 
peaks 
pro- 
duced by falling and rising edges of chip-enable. 
The 
capacitive 
and inductive 
loads on the device outputs 
determine 
the magnitudes 
of these 
peaks. 


Two-line 
control 
and 
proper 
decoupling 
capacitor 
selection 
will 
suppress 
transient 
voltage 
peaks. 
Each device should have a 0.1 IJoFceramic capacitor 
connected 
between 
Vcc and Vss, and between 
Vpp 
and Vss. 


Place 
the 
high-frequency, 
low-inherent-inductance 
capacitors 
as close as possible 
to the devices. 
Also, 
for every eight devices, 
a 4.7 IJoFelectrolytic 
capaci- 
tor 
should 
be placed 
at the 
array's 
power 
supply 
connection, 
between 
Vcc and Vss. The bulk capaci- 
tor will overcome 
voltage 
slumps 
caused by printed- 
circuit-board 
trace 
inductance, 
and 
will 
supply 
charge 
to the smaller 
capacitors 
as needed. 


Programming 
flash-memories, 
while 
they 
reside 
in 
the target 
system, 
requires 
that 
the 
printed 
circuit 
board designer 
pay attention 
to the Vpp power sup- 
ply trace. The Vpp pin supplies 
the memory 
cell cur- 
rent for programming. 
Use similar 
trace widths 
and 
layout considerations 
given the Vcc 
power 
bus. Ad- 
equate 
Vpp supply 
traces 
and 
decoupling 
will 
de- 
crease 
Vpp voltage 
spikes and overshoots. 


The 28F020 
is designed 
to offer 
protection 
against 
accidental 
erasure 
or 
programming 
during 
power 


transitions. 
Upon power-up, 
the 28F020 
is indifferent 
as to which 
power 
supply, 
Vpp or Vcc, 
powers 
up 
first. 
Power 
supply 
sequencing 
is not 
required. 
Internal 
circuitry 
in the 
28F020 
ensures 
that 
the 
command 
register is reset to the read mode on pow- 
er up. 


A system 
designer 
must guard against 
active writes 
for Vcc 
voltages 
above 
VLKO when 
Vpp is active. 


Since both WE /I 
and CE /I 
must be low for a com· 
mand 
write, 
driving 
either 
to 
VIH will inhibit 
writes. 


The control 
register 
architecture 
provides 
an added 
level of protection 
since 
alteration 
of memory 
con- 
tents only occurs 
after successful 
completion 
of the 
two-step 
command 
sequences. 


When 
designing 
portable 
systems, 
designers 
must 
consider 
battery 
power consumption 
not only during 
device 
operation, 
but also for data retention 
during 
system 
idle time. 
Flash 
nonvolatility 
increases 
the 
usable 
battery 
life 
of 
your 
system 
because 
the 
28F020 
does not consume 
any power to retain code 
or data when the system is off. Table 4 illustrates 
the 
power dissipated 
when updating 
the 28F020. 


Table 4. 28F020 Typical 
Update 
Power 
Dissipatlon(4) 


Operation 
Notes 
Power 
Dissipation 


(Watt-seconds) 


Array Program/Program 
Verify 
1 
0.34 


Array Erase/Erase 
Verify 
2 
0.37 


One Complete 
Cycle 
3 
1.05 


NOTES: 
1. 
Formula 
to 
calculate 
typical 
Program/Program 
Verify 
Power 
= 
[Vpp 
x 
II 
Bytes 
x 
typical 
II 
Prog 
Pulse 
(twHWH1 
x 
IpP2 typical 
+ tWHGL X IpP4 typical)] 
+ 
[Vcc 


x 
II Bytes 
x 
typical 
II Prog Pulses 
(tWHWH1 x 
ICC2 typi- 


cal + tWHGL X ICC4 typical)]. 
2. Formula 
to calculate 
typical 
Erase/Erase 
Verify 
Power 
= 
[Vpp 
(lpP3 typical 
x 
tERASE typical 
+ Ipps typical 
x 


tWHGL X II Bytes)] + [VCC (ICC3 typical 
x 
tERASE typical 
+ Iccs 
typical 
x 
tWHGL X II Bytes)]. 


3. 
One 
Complete 
Cycle 
= 
Array 
Preprogram 
+ 
Array 
Erase + Program. 
4. "Typicals" 
are 
not 
guaranteed 
but 
based 
on a limited 
number 
of samples 
from 
28F020-150 
production 
lots, 


Operating 
Temperature 
During Read 
0DCto +70DC(1) 
During Erase/Program 
ODCto + 70DC(1) 


Operating 
Temperature 
During Read 
-40DCto 
+ 85DC(2) 
During Erase/Program 
-40DC 
to + 85DC(2) 


Temperature 
Under Bias 
-1 ODCto + 80DC(1) 


Temperature 
Under Bias 
- 50DC to + 95DC(2) 


Storage Temperature 
-65DC 
to + 125DC 


Voltage 
on Any Pin with 
Respect 
to Ground 
- 2.0V to + 7.0V(2) 


Voltage 
on Pin Ag with 
Respect 
to Ground 
- 2.0V to + 13.5V(2, 3) 


Vpp Supply Voltage 
with 
Respect 
to Ground 


During Erase/Program 
.... 
- 2.0V to + 14.0V(2, 3) 


Vcc 
Supply Voltage 
with 
Respect 
to Ground 
- 2.0V to + 7.0V(2) 


Output Short Circuit Current 
100 mA(4) 


NOTICE: This is a production data sheet. The specifi- 
cations are subject to change without notice. 


• WARNING: Stressing the device beyond the "Absolute 
Maximum 
Ratings" 
may 
cause 
permanent 
damage. 


These are stress ratings 
only. Operation 
beyond 
the 


"Operating 
Conditions" 
is not recommended 
and ex- 


tended 
exposure 
beyond 
the 
"Operating 
Conditions" 


may affect device reliability. 


NOTES: 
1. Operating 
temperature 
is for commercial 
product 
defined 
by this specification. 


2. Operating 
temperature 
is for extended 
temperature 
product 
as defined 
by this specification. 


3. Minimum 
DC input voltage 
is -0.5V. 
During transitions, 
inputs may undershoot 
to -2.0V 
for periods 
less 


than 20 ns. Maximum 
DC voltage 
on output 
pins is Vcc 
+ 
0.5V, which 
may overshoot 
to Vcc 
+ 
2.0V for 


periods 
less than 20 ns. 
4. Maximum 
DC voltage 
on Ag or Vpp may overshoot 
to + 14.0V for periods 
less than 20 ns. 


5. Output 
shorted 
for no more than one second. 
No more than one output 
shorted 
at a time. 


6. See AC Input/Output 
reference 
Waveforms 
and AC Testing 
Load Circuits 
for testing 
characteristics. 


7. See 
High Speed 
AC Input/Output 
reference 
Waveforms 
and 
High Speed 
AC Testing 
Load Circuits 
for 


testing 
characteristics. 


Symbol 
Parameter 
Limits 
Unit 
Mln 
Max 


TA 
Operating 
Temperature(1) 
0 
70 
DC 


TA 
Operating 
Temperature(2) 
-40 
+85 
DC 


Vcc 
Vcc Supply Voltage 
(10%)(6) 
4.50 
5.50 
V 


Vcc 
Vcc Supply Voltage 
(5%)(7) 
4.75 
5.25 
V 


Limits 
Symbol 
Parameter 
Notes 
Unit 
Test Conditions 
Mln 
Typ(4) 
Max 


III 
Input Leakage Current 
1 
±1.0 
/LA 
Vcc = VccMax 
VIN = VCC or VSS 


ILO 
Output Leakage Current 
1 
±10 
/LA 
VCC = VCCMax 


VOUT = Vcc or VSS 


DC CHARACTERISTICS- TTL/NMOS COMPATIBLE-Commercial 
Products (Continued) 


limits 


Symbol 
Parameter 
Notes 
Unit 
Test Conditions 


Mln 
Typ(4) 
Max 


Iccs 
Vcc Standby Current 
1 
0.3 
1.0 
mA 
Vcc = VccMax 
CE# 
= VIH 


ICC1 
Vcc Active Read Current 
1 
10 
30 
mA 
Vcc = Vcc Max, CE# 
= VIL 


f = 6 MHz, lOUT = 0 mA 


ICC2 
VCC Programming 
Current 
1,2 
1.0 
10 
mA 
Programming 
in Progress 


ICC3 
Vcc Erase Current 
1,2 
5.0 
15 
mA 
Erasure in Progress 


ICC4 
VCC Program Verify Current 
1,2 
5.0 
15 
mA 
Vpp = VPPH, 
Program Verify in Progress 


ICC5 
Vcc Erase Verify Current 
1,2 
5.0 
15 
mA 
Vpp = VPPH, 
Erase Verify in Progress 


Ipps 
Vpp Leakage Current 
1 
±10 
p.A 
Vpp s: Vcc 


IpP1 
Vpp Read Current, 
ID Current 
1 
90 
200 
p.A 
Vpp> 
VCC 


or Standby 
Current 
±10 
Vpp s: Vcc 
- 


IpP2 
Vpp Programming 
Current 
1,2 
8 
30 
mA 
Vpp = VPPH 
Programming 
in Progress 


IpP3 
Vpp Erase Current 
1,2 
10 
30 
mA 
Vpp = VpPH 


IpP4 
Vpp Program Verify Current 
1,2 
2.0 
5.0 
mA 
Vpp = VPPH, 
Program Verify in Progress 


IpP5 
Vpp Erase Verify Current 
1,2 
2.0 
5.0 
mA 
Vpp = VPPH, 
Erase Verify in Progress 


VIL 
Input Low Voltage 
-0.5 
0.8 
V 


VIH 
Input High Voltage 
2.0 
Vcc + 0.5 
V 


VOL 
Output Low Voltage 
0.45 
V 
IOL = 5.8mA 


Vcc = VccMin 


VOH1 
Output High Voltage 
2.4 
V 
IOH = -2.5mA 


Vcc = VccMin 


VID 
Ag Intelligent 
Identifer 
11.50 
13.00 
V 


Voltage 


liD 
Ag Intelligent 
Identifier 
1,2 
90 
200 
p.A 
Ag = VID 


Current 


VPPL 
Vpp during Read-Only 
0.00 
6.5 
V 
NOTE: Erase/Program 
are 
Operations 
Inhibited when Vpp = VPPL 


VPPH 
Vpp during Read/Write 
11.40 
12.60 
V 


Operations 


VLKO 
VCC Erase/Write 
Lock Voltage 
2.5 
V 


• 


Limits 
Symbol 
Parameter 
Notes 
Unit 
Test Conditions 
Mln 
Typ(4) 
Max 


III 
Input Leakage Current 
1 
±1.0 
IJoA Vcc = VccMax 


VIN = Vccor 
Vss 


ILO 
Output Leakage Current 
1 
±10 
IJoA Vcc = Vcc Max 


VOUT = Vccor 
Vss 


Iccs 
Vcc Standby Current 
1 
50 
100 
IJoA Vcc = VccMax 


CE# = Vcc 
±0.2V 


ICC1 
Vcc Active Read Current 
1 
10 
30 
mA 
Vcc = Vcc Max, CE# 
= VIL 


f = 6 MHz, lOUT = 0 mA 


ICC2 
Vcc Programming 
Current 
1,2 
1.0 
10 
mA 
Programming 
in Progress 


ICC3 
Vcc Erase Current 
1,2 
5.0 
15 
mA 
Erasure in Progress 


ICC4 
Vcc Program Verify Current 
1,2 
5.0 
15 
mA 
Vpp = VPPH, Program 
Verify in Progress 


ICC5 
Vcc Erase Verify 
1,2 
5.0 
15 
mA 
Vpp = VPPH, 


Current 
Erase Verify in Progress 


Ipps 
Vpp Leakage Current 
1 
±10 
IJoA Vpp ~ Vcc 


IpP1 
Vpp Read Current, 
1 
90 
200 
IJoA Vpp> 
Vcc 
10 Current or 
±10 
Vpp ~ Vcc 
Standby 
Current 


IpP2 
Vpp Programming 
1,2 
8 
30 
mA 
Vpp = VPPH, 


Current 
Programming 
in Progress 


IpP3 
Vpp Erase Current 
1,2 
10 
30 
mA 
Vpp = VPPH, 
Erasure in Progress 


IpP4 
Vpp Program Verify 
1,2 
2.0 
5.0 
mA 
Vpp = VPPH, 


Current 
Program Verify in Progress 


IpP5 
Vpp Erase Verify 
1,2 
2.0 
5.0 
mA 
Vpp = VPPH, 


Current 
Erase Verify in Progress 


VIL 
Input Low Voltage 
-0.5 
0.8 
V 


VIH 
Input High Voltage 
0.7 Vcc 
Vcc + 0.5 
V 


VOL 
Output Low Voltage 
0.45 
V 
IOL = 5.8mA 
Vcc = VccMin 


VOH1 
0.85 Vcc 
IOH = - 2.5 mA, 


Output 
High Voltage 
V 
Vcc = VccMin 


VOH2 
Vcc 
- 
0.4 
IOH = -100 
IJoA, 


Vcc = VccMin 


VID 
Aglntelligent 
Identifer 
11.50 
13.00 
V 
Voltage 


lID 
Ag Intelligent 
Identifier 
1,2 
90 
200 
IJoA Ag = VID 
Current 


VPPL 
Vpp during Read-Only 
0.00 
6.5 
V 
NOTE: Erase/Programs 
are 
Operations 
Inhibited when Vpp = VPPL 


VPPH 
Vpp during Read/Write 
11.40 
12.60 
V 
Operations 


VLKO 
Vcc Erase/Write 
Lock 
2.5 
V 
Voltage 


Limits 


Symbol 
Parameter 
Notes 
Unit 
Test Conditions 
Min 
Typ(4) 
Max 


III 
Input Leakage 
Current 
1 
±1.0 
/LA 
Vcc = Vcc Max 
VIN = VCC or VSS 


ILO 
Output 
Leakage Current 
1 
±10 
/LA 
Vcc = VccMax 
VOUT = VCC or VSS 


Iccs 
Vcc Standby Current 
1 
0.3 
1.0 
mA 
Vcc = VccMax 
CE# 
= VIH 


ICC1 
Vcc Active Read Current 
1 
10 
30 
mA 
VCC = VCC Max, CE# 
= VIL 


f = 6 MHz, lOUT = 0 mA 


ICC2 
VCC Programming 
Current 
1,2 
1.0 
30 
mA 
Programming 
in Progress 


ICC3 
Vcc Erase Current 
1,2 
5.0 
30 
mA 
Erasure in Progress 


ICC4 
Vcc Program Verify Current 
1,2 
5.0 
30 
mA 
Vpp = VPPH, 
Program Verify in Progress 


Iccs 
Vcc Erase Verify Current 
1,2 
5.0 
30 
mA 
Vpp = VPPH, 
Erase Verify in Progress 


Ipps 
Vpp Leakage Current 
1 
±10 
/LA 
Vpp ~ Vcc 


IpP1 
Vpp Read Current, 
ID Current 
1 
90 
200 
/LA 
Vpp> 
VCC 


or Standby Current 
±10 
Vpp ~ VCC 


IpP2 
Vpp Programming 
Current 
1,2 
8 
30 
mA 
Vpp = VPPH 
Programming 
in Progress 


IpP3 
Vpp Erase Current 
1,2 
10 
30 
mA 
Vpp = VPPH 


IpP4 
Vpp Program Verify Current 
1,2 
2.0 
5.0 
mA 
Vpp = VPPH, 
Program Verify in Progress 


Ipps 
Vpp Erase Verify Current 
1,2 
2.0 
5.0 
mA 
Vpp = VPPH, 
Erase Verify in Progress 


VIL 
Input Low Voltage 
-0.5 
0.8 
V 


VIH 
Input High Voltage 
2.0 
VCC + 0.5 
V 


VOL 
Output 
Low Voltage 
0.45 
V 
IOL = 5.8mA 
Vcc = VCCMin 


VOH1 
Output High Voltage 
2.4 
V 
IOH = -2.5 
mA 


Vcc = VccMin 


VID 
Ag Intelligent 
Identifer 
11.50 
13.00 
V 


Voltage 


110 
Ag Intelligent 
Identifier 
1,2 
90 
500 
/LA 
Ag = VIO 


Current 


VPPL 
Vpp during Read-Only 
0.00 
6.5 
V 
NOTE: Erase/Program 
are 


Operations 
Inhibited when Vpp = VPPL 


VPPH 
Vpp during Read/Write 
11.40 
12.60 
V 


Operations 


VLKO 
Vcc Erase/Write 
Lock Voltage 
2.5 
V 


DC CHARACTERISTICS-CMOS 
COMPATIBLE-Extended 
Temperature 


Products 


Limits 
Symbol 
Parameter 
Notes 
Typ(4) 
Unit 
Test Conditions 
Mln 
Max 


III 
Input Leakage Current 
1 
± 1.0 
/LA Vcc = VccMax 


VIN = Vcc or Vss 


ILO 
Output 
Leakage Current 
1 
±10 
/LA Vcc = VccMax 


VOUT = Vcc or Vss 


Iccs 
Vcc Standby Current 
1 
50 
100 
/LA Vcc = VccMax 


CE# = Vcc 
±0.2V 


ICC1 
Vcc Active Read Current 
1 
10 
50 
mA 
Vcc = Vcc Max, CE# = VIL 
f = 6 MHz, lOUT = 0 mA 


ICC2 
Vcc Programming 
Current 
1,2 
1.0 
10 
mA 
Programming 
in Progress 


ICC3 
Vcc Erase Current 
1,2 
5.0 
30 
mA 
Erasure in Progress 


ICC4 
Vcc Program Verify Current 
1,2 
5.0 
30 
mA 
Vpp = VPPH, Program 
Verify in Progress 


ICC5 
Vcc Erase Verify 
1,2 
5.0 
30 
mA 
Vpp = VPPH, 


Current 
Erase Verify in Progress 


Ipps 
Vpp Leakage Current 
1 
±10 
/LA Vpp ~ Vcc 


IpP1 
Vpp Read Current, 
1 
90 
200 
/LA Vpp> 
Vcc 


ID Current or 
±10 
Vpp ~ Vcc 
Standby 
Current 


IpP2 
Vpp Programming 
1,2 
8 
30 
mA 
Vpp = VPPH, 


Current 
Programming 
in Progress 


IpP3 
Vpp Erase Current 
1,2 
10 
30 
mA 
Vpp = VPPH, 
Erasure in Progress 


IpP4 
Vpp Program Verify 
1,2 
2.0 
5.0 
mA 
Vpp = VpPH, 
Current 
Program Verify in Progress 


IpP5 
Vpp Erase Verify 
1,2 
2.0 
5.0 
mA 
Vpp = VPPH, 


Current 
Erase Verify in Progress 


VIL 
Input Low Voltage 
-0.5 
0.8 
V 


VIH 
Input High Voltage 
0.7 Vcc 
Vcc + 0.5 
V 


VOL 
Output 
Low Voltage 
0.45 
V 
IOL = 5.8 mA 
Vcc = VccMin 


VOH1 
0.85 Vcc 
IOH = - 2.5 mA, 


Output High Voltage 
V 
Vcc = VccMin 


VOH2 
Vcc 
- 
0.4 
IOH = -100/LA, 
Vcc = VccMin 


VIO 
Ag Intelligent 
Identifer 
11.50 
13.00 
V 


Voltage 


110 
Ag Intelligent 
Identifier 
1,2 
90 
500 
/LA Ag = VIO 


Current 


VpPL 
Vpp during Read-Only 
0.00 
6.5 
V 
NOTE: Erase/Programs 
are 


Operations 
Inhibited when Vpp = VPPL 


VPPH 
Vpp during Read/Write 
11.40 
12.60 
V 
Operations 


VLKO 
Vcc Erase/Write 
Lock 
2.5 
V 


Voltage 


Limits 


Symbol 
Parameter 
Notes 
Unit 
Conditions 


Mln 
Max 


CIN 
Address/Control 
Capacitance 
3 
8 
pF 
VIN = OV 


COUT 
Output Capacitance 
3 
12 
pF 
VOUT = OV 


NOTES 
for DC Characteristics 
and Capacitance: 
1. All currents 
are in RMS unless 
otherwise 
noted. 
Typical 
values 
at Vcc 
= 
5.0V, Vpp 
= 
12.0V, T = 
25°C. These 
currents 
are valid for all product 
versions 
(packages 
and speeds). 


2. Not 100% 
tested: 
Characterization 
data available. 


3. Sampled, 
not 100% 
tested. 


4. "Typicals" 
are not guaranteed, 
but based 
on a limited 
number 
of samples 
from 
production 
lots. 


HIGH SPEED 
AC TESTING 
INPUT/OUTPUT 
WAVEFORMS(2) 


.2.: _IN_P_UT 
__ 
)(:::>TES! 
POINTS< 


290245-21 


AC test inputs 
are driven 
at VOH (2.4 Vnu 
for a Logic 


"1" 
and VOL (0.45 
Vnu 
for a Logic 
"0". 
Input timing 


begins 
at VIH (2.0 Vnu 
and VIL (0.8 Ynu. 
Output 
tim- 
ing ends 
at VIH and VIL. Input rise and fall times 
(10% 
to 90%) 
';;10ns. 


::: 
INPUT "')(---TEST 
~INTS-X" 
OUTPUT 


290245-22 


AC test 
inputs 
are driven 
at 3.0V for a Logic 
"1" 
and 


O.OV for a Logic 
"0". 
Input 
timing 
begins, 
and 
output 


timing 
ends, 
at 1.5V. Input 
rise and fall times 
(10% 
to 


90%) 
';;10 ns. 


DEVICE 
UNDER 
TEST 


DEVICE 
UNDER 
TEST 


CL = 
100 pF 
CL includes 
Jig Capacitance 
RL = 3.3 kO 


CL=30pF 
CL includes 
Jig Capacitance 
RL = 3.3 kO 


Input Rise and Fall Times (10% to 90%) 
10 ns 


Input Pulse Levels 
0.45 and 2.4 


Input Timing Reference 
Level 
0.8 and 2.0 


Output Timing Reference 
Level 
0.8 and 2.0 


Capacitive 
LoadCI 
100 pF 


NOTES: 
1. Testing 
characteristics 
for 28F020-70 
in standard 
configuration, 
and 28F020-90 
and 28F020-150. 


2. Testing 
characteristics 
for 28F020-70 
in high speed 
configuration. 


Input Rise and Fall Times (10% to 90%) 
10 ns 


Input Pulse Levels 
0.0 and 3.0 


Input Timing Reference 
Level 
1.5 


Output Timing Reference 
Level 
1.5 


Capacitive 
Load CI 
30 pF 
• 


Versions 
Vcc +5% 
28F020·70(4) 


Vcc +10% 
28F020·70(5) 
28F020-90(5) 
28F020·150(5) 
Unit 


Symbol 
Characteristics 
Notes 
Min 
Max 
Min 
Max 
Mln 
Max 
Mln 
Max 


tAYAy/tRC 
Read Cycle Time 
70 
80 
90 
150 
ns 


tELQy/tCE 
Chip Enable 
70 
80 
90 
120 
ns 


Access Time 


tAYQy/tACC 
Address Access Time 
70 
80 
90 
120 
ns 


tGLQy/toE 
Output Enable 
28 
30 
35 
50 
ns 


Access Time 


tELQX/tLZ 
Chip Enable to 
2,3 
0 
0 
ns 
Output in Low Z 


tEHQZ 
Chip Disable to 
2 
35 
40 
45 
55 
ns 


Output in High Z 


tGLQX/tOLZ 
Output Enable to 
2,3 
0 
0 
0 
ns 


Output in Low Z 


tGHQZ/tOF 
Output Disable to 
2 
30 
30 
30 
30 
ns 


Output in High Z 


tOH 
Output Hold from 
1,2 
0 
0 
0 
ns 


Address, CE # , or 
OE# 
Change 


tWHGL 
Write Recovery Time 
6 
6 
6 
6 
JLs 
before Read 


NOTES: 
1. Whichever occurs first. 
2. Sampled, not 100% tested. 
3. Guaranteed by design. 
4. See High Speed AC Input/Output reference Waveforms and High Speed AC Testing Load Circuits for testing characteristics. 
5. See AC Input/Output reference Waveforms and AC Testing Load Circuits for testing characteristics. 
--€: 
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:G 
AC CHARACTERISTICS-Write/Erase/Program 
Only Operations(1)-Commercial and Extended Temperatun 


I\) 
Products 


Versions 
Vcc +5"- 
28F020-7()(2, 
4) 


Vcc + 10"- 
28F02D-7()(5) 
28F02D-9O(5) 
28F02D-15(15) 


Symbol 
Characteristics 
Notes 
Mln 
Max 
Mln 
Max 
Mln 
Max 
Mln 
Max 


tAVAV/tWC 
Write Cycle Time 
70 
80 
90 
150 


tAVWL/tAS 
Address Set-Up Time 
0 
0 
0 
0 


tWLAX/tAH 
Address Hold Time 
40 
40 
40 
40 


6 
55 


tOVWH/toS 
Data Set-Up Time 
40 
40 
40 
40 


6 
55 


tWHOX/tOH 
Data Hold Time 
10 
10 
10 
10 


tWHGL 
Write Recovery Time 
6 
6 
6 
6 
before Read 


lGHWL 
Read Recovery Time 
2 
0 
0 
0 
0 
before Write 


tELWL/ 
Chip Enable Set-Up 
15 
15 
15 
15 
tes 
Time before Write 


tWHEH/ 
Chip Enable Hold Time 
0 
0 
0 
0 
teH 


tWLWH/tWP 
Write Pulse Width 
40 
40 
40 
60 


6 
55 


tWHWL/ 
Write Pulse Width High 
20 
20 
20 
20 
tWPH 


tWHwH1 
Duration of Programming 
3 
10 
10 
10 
10 
Operation 


tWHWH2 
Duration of Erase 
3 
9.5 
9.5 
9.5 
9.5 
Operation 


tVPEL 
Vpp Set-Up Time to 
2 
1 
1 
1 
1 
Chip Enable Low 


NOTES: 
1. Read timing characteristics 
during 
read/write 
operations 
are the same as during read-only 
operations. 
Refer to AC Characteristics 
for Read-Only 
Operations. 
2. Guaranteed 
by design. 
3. The integrated 
stop timer terminates 
the programming/erase 
operations, 
thus eliminating 
the need for a maximum 
specification. 
4. See High Speed 
AC Input/Output 
reference 
Waveforms 
and High Speed 
AC Testing 
Load Circuits 
for testing 
characteristics. 
5. See AC Input/Output 
reference 
Waveforms 
and AC Testing 
Load Circuits 
for testing 
characteristics. 


6. Minimum 
Specification 
for Extended 
Temperature 
product. 


Limits 
Parameter 
Notes 
Unit 
Min 
Typ 
Max 


Chip Erase Time 
1,3,4 
2 
30 
Sec 


Chip Program Time 
1,2,4 
4 
25 
Sec 


NOTES: 
1. "Typicals" 
are not guaranteed, 
but based on a limited 
number 
of samples 
from production 
lots. Data taken 
at 25°C, 12.0V 


Vpp at 0 cycles. 
2. Minimum 
byte 
programming 
time 
excluding 
system 
overhead 
is 16 ",see 
(10 ",see 
program 
+ 6 ",see 
write 
recovery), 


while 
maximum 
is 400 ",see/byte 
(16 ",see x 25 loops 
allowed 
by algorithm). 
Max chip programming 
time is specified 
lower 


than the worst 
case allowed 
by the programming 
algorithm 
since most bytes program 
significantly 
faster 
than the worst 
case 


byte. 
3. Excludes 
OOH Programming 
prior to Erasure. 


4. Excludes 
System-Level 
Overhead. 


5. Refer to RR-60, 69 "ETOX 
Flash Memory 
Reliability 
Data Summaries" 
for typical 
cycling 
data and failure 
rate calculations 
. 
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PROCRA~ 


VERIFY 
CO~~ANO 


." 
CEO 
(EN) 
C 
c:.. 
CD..•. 
~~0 
:E 
OEO 
(CO) 


III< 
CD- 
0.. 
3 
III- 
0 
WEN (WO) 
.. 
"ll.. 
0 
IQ.. 
III33 
3" 
DATA (OQ) 
IQ 
0 
00 


CD..! 
0" 
5.0V 


::l 
III 
VCC 


OV 


tVPEL 


12.0V 
-- 
Vpp 
ct 
vpPL 
290245-16 
- 


@ 


ERASE 


VERIFY 
Cot.lt.lAND 
_. 
cC 


CEo 
(Eo) 


."r5c.. 
CD..•. 
~» 
oEO 
(Go) 
0 
::E 
III< 
CD- 
0.. 
3 
III 
WEO 
(WO) 
- 
0.. 
m.. 
III 
III 
CD0 
'a 
DATA 
(DQ) 


CD.. 
III.. 
O· 
;:, 
III 


S.OV 


VCC 


OV 


12.0V 


Vpp 


VpPL 
N 
CO 
290245-17 
." 
(11 
0 
N 
N 
<0 
0 
I 


Versions 
Vcc +5% 
28F020-70(2,4) 


Vcc + 10% 
28F020-70(5) 
28F020-90(5) 
28F020-150(5) 
Unit 


Symbol 
Characteristics 
Notes 
Min 
Max 
Min 
Max 
Min 
Max 
Min 
Max 


tAVAV 
Write Cycle Time 
70 
80 
90 
150 
ns 


tAVEL 
Address Set-Up Time 
0 
0 
0 
0 
ns 


tELAX 
Address Hold Time 
50 
50 
50 
55 
ns 
6 
60 


tDVEH 
Data Set-Up Time 
40 
40 
40 
45 
ns 


6 
50 


tEHDX 
Data Hold Time 
10 
10 
10 
10 
ns 


tEHGL 
Write Recovery Time 
6 
6 
6 
6 
J.l-s 


before Read 


tGHWL 
Read Recovery Time 
2 
0 
0 
0 
0 
ns 
before Write 


tWLEL 
Write Enable Set-Up Time 
0 
0 
0 
0 
ns 


before Chip Enable 


tEHWH 
Write Enable Hold Time 
0 
0 
0 
0 
ns 


tELEH 
Write Pulse Width 
50 
50 
50 
70 
ns 


6 
60 


tEHEL 
Write Pulse Width High 
20 
20 
20 
20 
ns 


tEHEH1 
Duration of Programming 
3 
10 
10 
10 
10 
J.l-s 
Operation 


tEHEH2 
Duration of Erase Operation 
3 
9.5 
9.5 
9.5 
9.5 
ms 


tVPEL 
Vpp Set-Up Time to 
2 
1 
1 
1 
1 
J.l-s 
Chip Enable Low 


NOTES: 
1. Read timing characteristics 
during 
read/write 
operations 
are the same as during read-only 
operations. 
Refer to AC Characteristics 
for Read-Only 
Operations. 


2. Guaranteed 
by design. 


3. The integrated 
stop timer terminates 
the programming/erase 
operations, 
thus eliminating 
the need for a maximum 
specification. 


4. See High Speed 
AC Input/Output 
reference 
Waveforms 
and High Speed 
AC Testing 
Load Circuits 
for testing 
characteritics. 


5. See AC Input/Output 
reference 
Waveforms 
and AC Testing 
Load Circuits 
for testing 
characteristics. 


6. Minimum 
specification 
for Extended 
Temperature 
product. 
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PROGRAM 


VERIFY 
COMMAND 
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·intel~ 


TEMPERATURE 
RANGE 
JL PACKAGE 
~ 
I 
LPROLIFERATION 
CODE 


T = EXTENDED (-40°C 
TO +550C) 
P = 32-PIN 
PLASTIC 
DIP L ACCESS SPEED (ns) 
BLANK = COMMERCIAL 
(OOC TO +700C) 
N = 32-LEAD 
PLCC 
80 ns 


E = STANDARD 
32 -LEAD 
TSOP 
90 ns 
F = REVERSE 32-LEAD 
TSOP 
150 ns 


200 
ns 


VALID 
COMBINATIONS: 
P28F020-70 
N28F020-70 
P26F020-90 
N26F020-90 
P26F020-150 
N26F020-150 


E26F020-70 
E26F020-90 
E26F020-150 


F26F020-70 
F26F020-90 
F26F020-150 


ADDITIONAL 
INFORMATION 


Order 
Number 
ER-20, 
"ETOX 
Flash Memory 
294005 
Technology" 


ER-24, 
"Intel 
Flash Memory" 
294008 


ER-28. 
"ETOX 
III Flash Memory 
294012 
Technology" 


RR-60, 
"ETOX 
Flash Memory 
293002 
Reliability 
Data Summary" 


AP-316, 
"Using 
Flash Memory for In- 
292046 
System 
Reprogrammable 
Nonvolatile 
Storage" 


AP-325 
"Guide 
to Flash Memory 
292059 
Reprogramming" 


Number 
Description 


-004 
Removed 
Preliminary 


Classification. 
Clarified AC and DC 
test conditions. 
Added "dimple" 
to F 
TSOP package. 
Corrected 


serpentine 
layout. 


-005 
Added -80V05, -90 ns speed grades. 
Added ex1ended temperature 
devices. Corrected 
AC Waveforms. 


-006 
Added -70 ns speed. 
Deleted -80V05 speed. 
Revised symbols, 
I.e., CEo OE, etc. 


to CE #, OE #, etc. 


28F010 
1024K (128K x 8) CMOS FLASH MEMORY 
• Flash Electrical 
Chip-Erase 
• Command 
Register 
Architecture 
for 
- 
1 Second 
Typical 
Chip-Erase 
Microprocessor 
/Mlcrocontroller 


• Quick Pulse Programming 
Algorithm 
Compatible 
Write Interface 


-10 
IJ-sTypical 
Byte-Program 
• Noise Immunity 
Features 
- 
2 Second 
Chip-Program 
- 
± 10% Vcc Tolerance 
• 100,000 Erase/Program 
Cycles 
- 
Maximum 
latch-Up 
Immunity 


through 
EPI Processing 
• 12.0V ±5% Vpp 
• ETOX Nonvolatile 
Flash Technology 
• High-Performance 
Read 
- 
EPROM-Compatible 
Process 
Base 
- 
65 ns Maximum 
Access Time 
- 
High-Volume 
Manufacturing 
• CMOS Low Power Consumption 
Experience 


-10 
mA Typical 
Active Current 
• JEDEC-Standard 
Pinouts 
- 
50 IJ-ATypical 
Standby 
Current 
- 
32-Pin Plastic Dip 
- 
0 Watts Data Retention 
Power 
- 
32-Lead 
PLCC 
• Integrated 
Program/Erase 
Stop Timer 
- 
32-Lead 
TSOP 


(See Packaging 
Spec., 
Order 
#231369) 
• Extended 
Temperature 
Options 


Intel's 
28F010 
CMOS 
flash 
memory 
offers 
the 
most 
cost-effective 
and 
reliable 
alternative 
for 
read/write 
random 
access 
nonvolatile 
memory. 
The 28F010 
adds electrical 
chip-erasure 
and reprogramming 
to familiar 


EPROM technology. 
Memory 
contents 
can be rewritten: 
in a test socket; 
in a PROM-programmer 
socket; 
on- 


board 
during 
subassembly 
test; in-system 
during 
final test; and in-system 
after-sale. 
The 28F010 
increases 
memory 
flexibility, 
while contributing 
to time and cost savings. 


The 
28F010 
is a 1024 kilobit 
nonvolatile 
memory 
organized 
as 131,072 
bytes 
of 8 bits. 
Intel's 
28F010 
is 
offered 
in 32-pin 
plastic 
dip or 32-lead 
PLCC and TSOP 
packages. 
Pin assignments 
conform 
to JEDEC 
standards 
for byte-wide 
EPROMs. 


Extended 
erase and program 
cycling capability 
is designed 
into Intel's ETOX (EPROM 
Tunnel 
Oxide) process 
technology. 
Advanced 
oxide processing, 
an optimized 
tunneling 
structure, 
and lower electric 
field combine 
to 
extend 
reliable 
cycling 
beyond that of traditional 
EEPROMs. 
With the 12.0V Vpp supply, the 28F010 
performs 
100,000 erase and program 
cycles well within the time limits of the Quick Pulse Programming 
and Quick Erase 
algorithms. 


Intel's 28F010 
employs 
advanced 
CMOS circuitry 
for systems 
requiring 
high-performance 
access 
speeds, 
low 
power consumption, 
and immunity 
to noise. Its 65 nanosecond 
access 
time provides 
no-WAlT-state 
perform- 


ance for a wide range of microprocessors 
and microcontrollers. 
Maximum 
standby 
current 
of 100 p.A trans- 
lates into power 
savings 
when the device 
is deselected. 
Finally, the highest 
degree 
of latch-up 
protection 
is 
achieved 
through 
Intel's 
unique EPI processing. 
Prevention 
of latch-up 
is provided 
for stresses 
up to 100 mA 
on address 
and data pins, from 
-1V 
to Vcc + 1V. 


With Intel's 
ETOX process 
base, the 28F01 0 levers years of EPROM experience 
to yield the highest 
levels of 
quality, 
reliability, 
and cost-effectiveness. 


STATE 


CONTROL 


CONNAND 
REGiSTER 


INTEGRATED 
STOP TINER 


VCC --+ 
V 


SS 


_ 


Vpp 


Symbol 
Type 
Name and Function 


Ao-A16 
INPUT 
ADDRESS 
INPUTS for memory addresses. 
Addresses 
are internally 


latched during a write cycle. 


DQO-DQ7 
INPUT /OUTPUT 
DATA INPUT/OUTPUT: 
Inputs data during memory write cycles; 


outputs data during memory read cycles. The data pins are active high 
and float to tri-state 
OFF when the chip is deselected 
or the outputs 


are disabled. 
Data is internally 
latched during a write cycle. 


CE# 
INPUT 
CHIP ENABLE: Activates 
the device's 
control 
logic, input buffers, 


decoders 
and sense amplifiers. 
CE # is active low; CE # high 


deselects 
the memory device and reduces 
power consumption 
to 
standby 
levels. 


OE# 
INPUT 
OUTPUT 
ENABLE: Gates the devices output through the data buffers 


during a read cycle. OE# 
is active low. 


WE# 
INPUT 
WRITE 
ENABLE: Controls 
writes to the control 
register and the array. 


Write enable is active low. Addresses 
are latched on the falling edge 


and data is latched on the rising edge of the WE # pulse. 
Note: With Vpp 
:5:: 6.5V, memory contents 
cannot be altered. 


Vpp 
ERASE/PROGRAM 
POWER SUPPLY for writing the command 


register, erasing the entire array, or programming 
bytes in the array. 


Vcc 
DEVICE 
POWER SUPPLY (5V ± 10%) 


Vss 
GROUND 


NC 
NO INTERNAL 
CONNECTION 
to device. 
Pin may be driven or left 


floating. 
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The 28F010 flash memory provides nonvolatility 
along with the capability to perform over 100,000 
electrical chip-erasure/reprogram cycles. These fea- 
tures make the 28F010 an innovative alternative to 
disk, EEPROM, and battery-backed static RAM. 
Where periodic updates of code and data-tables are 
required, the 28F010's reprogrammability and non- 
volatility make it the obvious and ideal replacement 
for EPROM. 


Primary applications and operating systems stored 
in flash eliminate the slow disk-to-DRAM download 
process. This results in dramatic enhancement of 
performance and substantial reduction of power 
consumption - 
a consideration particularly impor- 


tant in portable equipment. Flash memory increases 
flexibility with electrical chip erasure and in-system 
update capability of operating systems and applica- 
tion code. With updatable code, system manufactur- 
ers can easily accommodate last-minute changes as 
revisions are made. 


In diskless workstations and terminals, network traf- 
fic reduces to a minimum and systems are instant- 
on. Reliability exceeds that of electromechanical 
media. Often in these environments, power interrup- 
tions force extended re-boot periods for all net- 
worked terminals. This mishap is no longer an issue 
if boot code, operating systems, communication pro- 
tocols and primary applications are flash-resident in 
each terminal. 


For embedded systems that rely on dynamic RAM/ 
disk for main system memory or nonvolatile backup 
storage, the 28F010 flash memory offers a solid 
state alternative in a minimal form factor. The 
28F010 provides higher performance, lower power 
consumption, instant-on capability, and allows an 
"execute in place" memory hierarchy for code and 
data table reading. Additionally, the flash memory is 
more rugged and reliable in harsh environments 
where extreme temperatures and shock can cause 
disk-based systems to fail. 


The need for code updates pervades all phases of a 
system's life - 
from prototyping to system manufac- 


ture to after-sale service. The electrical chip-erasure 
and reprogramming ability of the 28F010 allows in- 
circuit alterability; this eliminates unnecessary han- 
dling and less-reliable socketed connections, while 
adding greater test, manufacture, and update flexi- 
bility. 
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Material and labor costs 
associated 
with 
code 


changes increases at higher levels of system inte- 
gration - 
the most costly being code updates after 


sale. Code "bugs", or the desire to augment system 
functionality, prompt after-sale code updates. Field 
revisions to EPROM-based code requires the re- 
moval of EPROM components or entire boards. With 
the 28F010, code updates are implemented locally 
via an edge-connector, or remotely over a commun- 
cation link. 


For systems currently using a high-density static 
RAM/battery 
configuration for data accumulation, 


flash memory's inherent nonvolatility eliminates the 
need for battery backup. The concern for battery 
failure no longer exists, an important consideration 
for portable equipment and medical instruments, 
both requiring continuous performance. In addition, 
flash memory offers a considerable cost advantage 
over static RAM. 


Flash memory's electrical chip erasure, byte pro- 
grammability and complete nonvolatility fit well with 
data accumulation and recording needs. Electrical 
chip-erasure gives the designer a "blank slate" in 
which to log or record data. Data can be periodically 
off-loaded for analysis and the flash memory erased 
producing a new "blank slate". 


A high degree of on-chip feature integration simpli- 
fies memory-to-processor interfacing. Figure 4 de- 
picts two 28F010s tied to the 80C186 system bus. 
The 28F010's architecture minimizes interface cir- 
cuitry needed for complete in-circuit updates of 
memory contents. 


The outstanding feature of the TSOP (Thin Small 
Outline Package) is the 1.2 mm thickness. With stan- 
dard and reverse pin configurations, TSOP reduces 
the number of board layers and overall volume nec- 
essary to layout multiple 28F010s. TSOP is particu- 
larly suited for portable equipment and applications 
requiring large amounts of flash memory. Figure 3 
illustrates the TSOP Serpentine layout. 


With cost-effective in-system reprogramming, ex- 
tended cycling capability, and true nonvolatility, 
the 28F010 offers advantages to the alternatives: 
EPROMs, EEPROMs, battery backed static RAM, 
or disk. 
EPROM-compatible read specifications, 


straight-forward interfacing, and in-circuit alterability 
offers designers unlimited flexibility to meet the high 
standards of today's designs. 
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Flash-memory augments EPROM functionality with 
in-circuit electrical erasure and reprogramming. The 
28F010 introduces a command register to manage 
this new functionality. The command register allows 
for: 100% TIL-Ievel control inputs; fixed power sup- 
plies during erasure and programming; and maxi- 
mum EPROM compatibility. 


In the absence of high voltage on the Vpp pin, the 
28F010 is a read-only memory. Manipulation of the 
external memory-control pins yields the standard 
EPROM read, standby, output disable, and Intelli- 
gent Identifier operations. 


The same EPROM read, standby, and output disable 
operations are available when high voltage is ap- 
plied to the Vpp pin. In addition, high voltage on Vpp 
enables erasure and programming of the device. All 
functions 
associated with 
altering memory con- 


tents-Intelligent 
Identifier, erase, erase verify, pro- 
gram, and program verify-are 
accessed via the 


command register. 


Commands are written to the register using standard 
microprocessor 
write 
timings. 
Register contents 


serve as input to an internal state-machine which 
controls the erase and programming circuitry. Write 
cycles also internally latch addresses and data 


needed for programming or erase operations. With 
the appropriate command written to the register, 
standard microprocessor read timings output array 
data, access the Intelligent Identifier codes, or out· 
put data for erase and program verification. 


Successive command write cycles define the dura- 
tions of program and erase operations; specifically, 
the program or erase time durations are normally 
terminated by associated program or erase verify 
commands. An integrated stop timer provides simpli- 
fied timing control over these operations; thus elimi- 
nating the need for maximum program/erase timing 
specifications. Programming and erase pulse dura- 
tions are minimums only. When the stop timer termi- 
nates a program or erase operation, the device en- 
ters an inactive state and remains inactive until re- 
ceiving the appropriate verify or reset command. 


The command register is only active when Vpp is at 
high voltage. Depending upon the application, the 
system designer may choose to make the Vpp pow- 
er supply switchable-available 
only when memory 


updates are desired. When Vpp 
= VPPL, the con- 


Pins 
Vpp(1) 
Ao 
Ag 
CE# 
OE# 
WE# 
DQO-DQ7 
Operation 


Read 
VPPL 
Ao 
Ag 
VIL 
VIL 
VIH 
Data Out 


Output Disable 
VPPL 
X 
X 
VIL 
VIH 
VIH 
Tri-State 


READ-ONLY 
Standby 
VPPL 
X 
X 
VIH 
X 
X 
Tri-State 


Intelligent 
Identifier 
(Mfr)(2) 
VPPL 
VIL 
VID(3) 
VIL 
VIL 
VIH 
Data = 89H 


Intelligent 
Identifier 
(Device)(2) 
VPPL 
VIH 
VID(3) 
VIL 
VIL 
VIH 
Data = 84H 


Read 
VPPH 
Ao 
Ag 
VIL 
VIL 
VIH 
Data Out(4) 


READ/WRITE 
Output Disable 
VpPH 
X 
X 
VIL 
VIH 
VIH 
Tri-State 


Standby(5) 
VPPH 
X 
X 
VIH 
X 
X 
Tri-State 


Write 
VPPH 
Ao 
Ag 
VIL 
VIH 
VIL 
Data In(6) 


NOTES: 
1. Refer to DC Characteristics. When Vpp = VpPLmemory contents can be read but not written or erased. 
2. Manufacturer and device codes may also be accessed via a command register write sequence. Refer to Table 3. All other 
addresses low. 
3. VID is the Intelligent Identifier high voltage. Refer to DC Characteristics. 
4. Read operations with VPP = VPPHmay access array data or the Intelligent Identifier codes. 
5. With VPPat high voltage. the standby current equals Ice + Ipp (standby). 
6. Refer to Table 3 for valid Data-In during a write operation. 
7. X can be VIL or VIH. 


tents 
of the register 
default 
to the read command. 
making 
the 
28F010 
a 
read-only 
memory. 
In this 
mode, the memory 
contents 
cannot 
be altered. 


Or, the system 
designer 
may choose 
to "hardwire" 
Vpp, 
making 
the 
high 
voltage 
supply 
constantly 
available. 
In this case, all Command 
Register 
func- 
tions 
are inhibited 
whenever 
Vcc 
is below the write 
lockout 
voltage 
VLKO. (See Power Up/Down 
Protec- 
tion) 
The 28F010 
is designed 
to accommodate 
ei- 
ther design 
practice, 
and to encourage 
optimization 
of the processor-memory 
interface. 


The two-step 
program/erase 
write sequence 
to the 
Command 
Register 
provides 
additional 
software 
write protections. 


Read 


The 28F01 0 has two control 
functions, 
both of which 
must 
be logically 
active, 
to obtain 
data at the out- 
puts. Chip-Enable 
(CE#) 
is the 
power 
control 
and 
should 
be used for device 
selection. 
Output-Enable 
(OE #) 
is the output 
control 
and should 
be used to 
gate data from the output 
pins, independent 
of de- 
vice selection. 
Refer to AC read timing waveforms. 


When Vpp is high (VPPH), the read operation 
can be 
used to access 
array data, to output 
the Intelligent 
Identifier 
codes, 
and to access 
data for 
program/ 


erase verification. 
When Vpp is low (VppLl, the read 
operation 
can only 
access 
the array data. 


Output 
Disable 


With Output-Enable 
at a logic-high 
level (VIH), output 
from the device 
is disabled. 
Output 
pins are placed 
in a high-impedance 
state. 


Standby 


With Chip-Enable 
at a logic-high 
level, the standby 
operation 
disables 
most 
of the 
28F010's 
circuitry 
and 
substantially 
reduces 
device 
power 
consump- 
tion. 
The 
outputs 
are placed 
in a high-impedance 
state, 
independent 
of 
the 
Output-Enable 
signal. 


If the 
28F010 
is deselected 
during 
erasure, 
pro- 
gramming, 
or 
program/erase 
verification, 
the 
device 
draws 
active 
current 
until 
the 
operation 
is 
terminated. 


Intelligent 
Identifier 
Operation 


The Intelligent 
Identifier 
operation 
outputs the manu- 
facturer 
code 
(89H) 
and 
device 
code 
(84H). 
Pro- 
gramming 
equipment 
automatically 
matches 
the de- 
vice 
with 
its proper 
erase 
and 
programming 
algo- 
rithms. 


• 


With Chip-Enable and Output-Enable at a logic low 
level, raising A9 to high voltage VID(see DC Charac- 
teristics) activates the operation. Data read from lo- 
cations OOOOHand 0001H represent the manufac- 
turer's code and the device code, respectively. 


The manufacturer- and device-codes can also be 
read via the command register, for instances where 
the 28F010 is erased and reprogrammed in the tar- 
get system. Following a write of 90H to the com- 
mand register, a read from address location OOOOH 
outputs the manufacturer code (89H). A read from 
address 0001H outputs the device code (B4H). 


Device erasure and programming are accomplished 
via the command register, when high voltage is ap- 
plied to the Vpp pin. The contents of the register 
serve as input to the internal state-machine. The 
state-machine outputs dictate the function of the 
device. 


The command register itself does not occupy an ad- 
dressable memory location. The register is a latch 
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used to store the command, along with address and 
dc,ltainformation needed to execute the command. 


The command register is written by bringing Write- 
Enable to a logic-low level (VIU, while Chip-Enable is 
low. Addresses are latched on the falling edge of 
Write-Enable, while data is latched on the rising 
edge of the Write-Enable pulse. Standard microproc- 
essor write timings are used. 


Refer to AC Write Characteristics and the Erase/ 
Programming 
Waveforms 
for 
specific 
timing 


parameters. 


When low voltage is applied to the Vpp pin, the con- 
tents of the command register default to OOH,en- 
abling read-only operations. 


Placing high voltage on the Vpp pin enables read/ 
write operations. Device operations are selected by 
writing specific data patterns into the command reg- 
ister. 
Table 
3 
defines 
these 
28F010 
register 


commands. 


Bus 
First Bus Cycle 
Second Bus Cycle 


Command 
Cycles 
Req'd 
Operatlon(l) 
Address(2) 
Data(3) Operatlon(l) 
Address(2) 
Data(3) 


Read Memory 
1 
Write 
X 
OOH 


Read Intelligent Identifier 
3 
Write 
X 
90H 
Read 
(4) 
(4) 
Codes(4) 


Set-up EraselErase(5) 
2 
Write 
X 
20H 
Write 
X 
20H 


Erase Verify(5) 
2 
Write 
EA 
AOH 
Read 
X 
EVD 


Set-up Program/Program(6) 
2 
Write 
X 
40H 
Write 
PA 
PD 


Program Verify(6) 
2 
Write 
X 
COH 
Read 
X 
PVD 


Reset(7) 
2 
Write 
X 
FFH 
Write 
X 
FFH 


NOTES: 
1. Bus operations 
are defined 
in Table 
2. 
2. IA = Identifier 
address: 
OOH for manufacturer 
code, 01 H for device 
code. 
EA = Address 
of memory 
location 
to be read during 
erase verify. 
PA = Address 
of memory 
location 
to be programmed. 
Addresses 
are latched 
on the falling 
edge of the Write-Enable 
pulse. 
3. 10 = Data read from 
location 
IA during 
device 
identification 
(Mfr = 89H, Device = B4H). 
EVD = Data read from 
location 
EA during 
erase verify. 
PO = Data to be programmed 
at location 
PA. Data is latched 
on the rising edge of Write 
Enable. 
PVD = Data read from 
location 
PA during 
program 
verify. 
PA is latched 
on the Program 
command. 


4. Following 
the Read inteligent 
10 command. 
two read operations 
access 
manufacturer 
and device 
codes. 
5. Figure 6 illustrates 
the Quick 
Erase Algorithm. 


6. Figure 
5 illustrates 
the Quick 
Pulse Programming 
Algorithm. 
7. The second 
bus cycle 
must be followed 
by the desired 
command 
register 
write. 


While Vpp is high, for erasure and programming, 
memory contents can be accessed via the read 
command. The read operation is initiated by writing 
OOH into the command register. Microprocessor 
read cycles retrieve array data. The device remains 
enabled for reads until the command register con- 
tents are altered. 


The default contents of the register upon Vpp pow- 
er-up is OOH.This default value ensures that no spu- 
rious alteration of memory contents occurs during 
the Vpp power transition. Where the Vpp supply is 
hard-wired to the 28F010, the device powers-up and 
remains enabled for reads until the command-regis- 
ter contents are changed. Refer to the AC Read 
Characteristics and Waveforms for specific timing 
parameters. 


Intelligent 
Identifier 
Command 


Flash memories are intended for use in applications 
where the local CPU alters memory contents. As 
such, manufacturer- and device-codes must be ac- 
cessible while the device resides in the target sys- 
tem. PROM programmers typically access signature 
codes by raising A9 to a high voltage. However, mul- 
tiplexing high voltage onto address lines is not a de- 
sired system-design practice. 


The 28F010 contains an Intelligent Identifier opera- 
tion to supplement traditional PROM-programming 
methodology. The operation is initiated by writing 
90H into the command register. Following the com- 
mand write, a read cycle from address OOOOHre- 
trieves the manufacturer code of 89H. A read cycle 
from address 0001H returns the device code of 
B4H. To terminate the operation, it is necessary to 
write another valid command into the register. 


Set-up 
Erase/Erase 
Commands 


Set-up Erase is a command-only operation that 
stages the device for electrical erasure of all bytes in 
the array. The set-up erase operation is performed 
by writing 20H to the command register. 


To commence chip-erasure, the erase command 
(20H) must again be written to the register. The 
erase operation begins with the rising edge of the 
Write-Enable pulse and terminates with the rising 
edge of the next Write-Enable pulse (Le.,Erase-Veri- 
fy Command). 


This two-step sequence of set-up followed by execu- 
tion ensures that memory contents are not acciden- 
tally erased. Also, chip-erasure can only occur when 
high voltage is applied to the Vpp pin. In the absence 


of this high voltage, memory contents are protected 
against erasure. Refer to AC Erase Characteristics 
and Waveforms for specific timing parameters. 


Erase-Verify 
Command 


The erase command erases all bytes of the array in 
parallel. After each erase operation, all bytes must 
be verified. The erase verify operation is initiated by 
writing AOHinto the command register. The address 
for the byte to be verified must be supplied as it is 
latched on the falling edge of the Write-Enable 
pulse. The register write terminates the erase opera- 
tion with the rising edge of its Write-Enable pulse. 


The 28F010 applies an internally-generated margin 
voltage to the addressed byte. Reading FFH from 
the addressed byte indicates that all bits in the byte 
are erased. 


The erase-verify command must be written to the 
command register prior to each byte verification to 
latch its address. The process continues for each 
byte in the array until a byte does not return FFH 
data, or the last address is accessed. 


In the case where the data read is not FFH, another 
erase operation 
is performed. (Refer to Set-up 


Erase/Erase). Verification then resumes from the 
address of the last-verified byte. Once all bytes in 
the array have been verified, the erase step is com- 5 
plete. The device can be programmed. At this point, 
the verify operation is terminated by writing a valid 
command (e.g. Program Set-up) to the command 
register. Figure 6, the Quick Erase algorithm, illus- 
trates how commands and bus operations are com- 
bined to perform electrical erasure of the 28F010. 
Refer to AC Erase Characteristics and Waveforms 
for specific timing parameters. 


Set-up 
Program/Program 
Commands 


Set-up program is a command-only operation that 
stages the device for byte programming. Writing 40H 
into the command register performs the set-up 
operation. 


Once the program set-up operation is performed, 
the next Write-Enable pulse causes a transition to 
an active programming operation. Addresses are in- 
ternally latched on the falling edge of the Write-En- 
able pulse. Data is internally latched on the rising 
edge of the Write-Enable pulse. The rising edge of 
Write-Enable also begins the programming opera- 
tion. The programming operation terminates with the 
next rising edge of Write-Enable, used to write the 
program-verify command. Refer to AC Programming 
Characteristics and Waveforms for specific timing 
parameters. 


The 28F010 is programmed on a byte-by-byte basis. 
Byte programming may occur sequentially or at ran- 
dom. Following each programming operation, the 
byte just programmed must be verified. 


The program-verify operation is initiated by writing 
COH into the command register. The register write 
terminates the programming operation with the ris- 
ing edge of its Write-Enable pulse. The program-ver- 
ify operation stages the device for verification of the 
byte last programmed. No new address information 
is latched. 


The 28F010 applies an internally-generated margin 
voltage to the byte. A microprocessor read cycle 
outputs the data. A successful comparison between 
the programmed byte and true data means that the 
byte is successfully programmed. Programming then 
proceeds to the next desired byte location. Figure 5, 
the 28F010 Quick Pulse Programming algorithm, il- 
lustrates how commands are combined with bus op- 
erations to perform byte programming. Refer to AC 
Programming Characteristics and Waveforms for 
specific timing parameters. 


Reset 
Command 


A reset command is provided as a means to safely 
abort the erase- or program-command sequences. 
Following either set-up command (erase or program) 
with two consecutive writes of FFH will safely abort 
the operation. Memory contents will not be altered. 
A valid command must then be written to place the 
device in the desired state. 


EEPROM cycling failures have always concerned 
users. The high electrical field required by thin oxide 
EEPROMs for tunneling can literally tear apart the 
oxide at defect regions. To combat this, some sup- 
pliers have implemented redundancy schemes, re- 
ducing cycling failures to insignificant levels. Howev- 
er, redundancy requires that cell size be doubled-- 
an expensive solution. 


Intel has designed extended cycling capability into 
its ETOX flash memory technology. Resulting im- 
provements in cycling reliability come without in- 
creasing memory cell size or complexity. First, an 
advanced tunnel oxide increases the charge carry- 
ing ability ten-fold. Second, the oxide area per cell 
subjected to the tunneling electric field is one-tenth 
that of common EEPROMs, minimizing the probabili- 
ty of oxide defects in the region. Finally, the peak 
electric 
field 
during 
erasure 
is 
approximately 
2 MV/cm lower than EEPROM. The lower electric 
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of failure-increasing 
time to wearout by a factor of 


100,000,000. 
• 


The 28F010 is capable or 100,000 program/erase 
cycles. The device is programmed and erased using 
Intel's Quick Pulse Programming and Quick Erase 
algorithms. Intel's algorithmic approach uses a se- 
ries of operations (pulses), along with byte verifica- 
tion, to completely and reliably erase and program 
the device. 


The Quick Pulse Programming algorithm uses pro- 
gramming operations of 10 JLs duration. Each opera- 
tion is followed by a byte verification to determine 
when the addressed byte has been successfully pro- 
grammed. The algorithm allows for up to 25 pro- 
gramming operations per byte, although most bytes 
verify on the first or second operation. The entire 
sequence of programming and byte verification is 
performed with Vpp at high voltage. Figure 5 illus- 
trates the Quick Pulse Programming algorithm. 


Intel's Quick Erase algorithm yields fast and reliable 
electrical erasure of memory contents. The algo- 
rithm employs a closed-loop flow, similar to the 
Quick Pulse Programming algorithm, to simulta- 
neously remove charge from all bits in the array. 


Erasure begins with a read of memory contents. The 
28F010 is erased when shipped from the factory. 
Reading FFH data from the device would immedi- 
ately be followed by device programming. 


For devices being erased and reprogrammed, uni- 
form and reliable erasure is ensured by first pro- 
gramming all bits in the device to their charged state 
(Data = OOH).This is accomplished, using the Quick 
Pulse Programming algorithm, in approximately two 
seconds. 


Erase execution then continues with an initial erase 
operation. Erase verification (data = FFH) begins at 
address OOOOHand continues through the array to 
the last address, or until data other than FFH is en- 
countered. With each erase operation, an increasing 
number of bytes verify to the erased state. Erase 
efficiency may be improved by storing the address of 
the last byte verified in a register. Following the next 
erase operation, verification starts at that stored ad- 
dress location. Erasure typically occurs in one sec- 
ond. Figure 6 illustrates the Quick Erase algorithm. 


NOTES: 
1. See 
DC Characteristics 
for the 
value 
of VPPH and 
VpPL· 
2. Program 
Verify 
is only performed 
after by1e program- 
ming. A final 
read/compare 
may be performed 
(option- 
al) after the register 
is written 
with the Read command. 


Bus 
Command 
Comments 
Operation 


Standby 
Wait for Vpp Ramp to VPPH(1) 


Initialize 
Pulse-Count 


Write 
Set-up 
Data = 40H 
Program 


Write 
Program 
Valid Address/Data 


Standby 
Duration 
of Program 


Operation 
(tWHWH1) 


Write 
Program(2) 
Data = COH; Stops Program 
Verify 
Operation(3) 


Standby 
tWHGL 


Read 
Read By1e to Verify 
Programming 


Standby 
Compare 
Data Output 
to Data 


Expected 


Write 
Read 
Data = OOH. Resets the 
Register 
for Read Operations 


Standby 
Wait for Vpp Ramp to VppLl1) 


3. Refer to principles 
of operation. 


4. CAUTION: The algorithm MUST BE FOLLOWED 
to ensure proper and reliable operation of the de- 
vice. 
• 
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1. See 
DC Characteristics 
for the 
value 
of VPPH and 


VPPL· 
2. Erase 
Verify 
is performed 
only 
after 
chip-erasure. 
A 


final 
read/compare 
may be performed 
(optional) 
after 


the register 
is written 
with the read command. 


Bus 
Command 
Comments 
Operation 


Entire Memory 
Must = OOH 


Before 
Erasure 


Use Quick Pulse 
Programming 
Algorithm 
(Figure 5) 


Standby 
Wait for Vpp Ramp to VPPH(1) 


Initialize Addresses 
and 
Pulse-Count 


Write 
Set-up 
Data = 20H 


Erase 


Write. 
Erase 
Data = 20H 


Standby 
Duration 
of Erase Operation 


(tWHWH2) 


Write 
Erase(2) 
Addr = Byte to Verify; 


Verify 
Data = AOH; Stops 
Erase 


Operation(3) 


Standby 
tWHGL 


Read 
Read Byte to Verify Erasure 


Standby 
Compare 
Output to FFH 
Increment 
Pulse-Count 


Write 
Read 
Data = OOH, Resets 
the 


Register 
for Read Operations 


Standby 
Wait for Vpp Ramp to Vppd1) 


3. Refer to principles 
of operation. 


4. CAUTION: 
The 
algorithm 
MUST 
BE FOLLOWED 


to ensure 
proper 
and 
reliable 
operation 
of the 
de- 


vice. 
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DESIGN CONSIDERATIONS 


Two-Line Output Control 


Flash-memories 
are often used in larger memory 
ar- 
rays. 
Intet provides 
two 
read-control 
inputs 
to ac- 
commodate 
multiple 
memory 
connections. 
Two-line 
control 
provides 
for: 


a. the 
lowest 
possible 
memory 
power 
dissipation 
and, 
b. complete 
assurance 
that 
output 
bus contention 
will not occur. 


To efficiently 
use these 
two 
control 
inputs, 
an ad- 
dress-decoder 
output 
should 
drive 
chip-enable, 
while 
the 
system's 
read 
signal 
controls 
all flash- 
memories 
and other parallel 
memories. 
This assures 
that only enabled 
memory 
devices 
have active 
out- 
puts, 
while 
deselected 
devices 
maintain 
the 
low 
power 
standby 
condition. 


Power Supply Decoupling 


Flash-memory 
power-switching 
characteristics 
re- 
quire 
careful 
device 
decoupling. 
System 
designers 
are interested 
in three supply current 
(Icd 
issues- 


standby, 
active, 
and 
transient 
current 
peaks 
pro- 
duced by falling and rising edges of chip-enable. 
The 
capacitive 
and inductive 
loads on the device outputs 
determine 
the magnitudes 
of these 
peaks. 


Two-line 
control 
and 
proper 
decoupling 
capacitor 
selection 
will 
suppress 
transient 
voltage 
peaks. 
Each device should have a 0.1 J-LFceramic 
capacitor 
connected 
between 
Vcc and Vss, and between 
Vpp 
and Vss. 


circuit-board 
trace 
inductance, 
and 
will 
supply 


charge 
to the smaller 
capacitors 
as needed. 


Vpp Trace on Printed Circuit Boards 


Programming 
flash-memories, 
while 
they 
reside 
in 


the target 
system, 
requires 
that 
the 
printed 
circuit 
board designer 
pay attention 
to the Vpp power sup- 


ply trace. The Vpp pin supplies 
the memory 
cell cur- 
rent for programming. 
Use similar 
trace 
widths 
and 
layout considerations 
given the Vcc 
power bus. Ad- 


equate 
Vpp supply 
traces 
and 
decoupling 
will 
de- 
crease 
Vpp voltage 
spikes 
and overshoots. 


Power Up/Down Protection 


The 28F010 
is designed 
to offer 
protection 
against 
accidental 
erasure 
or 
programming 
during 
power 
transitions. 
Upon power-up, 
the 28F010 
is indifferent 
as to which 
power 
supply, 
Vpp or VCC, powers 
up 
first. Power supply sequencing 
is not required. 
Inter- 


nal circuitry 
in the 
28F010 
ensures 
that 
the 
com- 
mand 
register 
is reset to the read mode 
on power 
up. 


A system 
designer 
must guard against 
active writes 
for Vcc 
voltages 
above 
VLKO when 
Vpp is active. 
Since both WE # and CE # must be low for a com- 
mand write, 
driving 
either 
to VIH will inhibit 
writes. 
The control 
register 
architecture 
provides 
an added 
level of protection 
since 
alteration 
of memory 
con- 
tents only occurs after successful 
completion 
of the 
two-step 
command 
sequences. 


28F010 Power Dissipation 


When 
designing 
portable 
systems, 
designers 
must 


consider 
battery 
power consumption 
not only during 
device 
operation, 
but also for data retention 
during 
system 
idle time. 
Flash 
nonvolatility 
increases 
the 
usable 
battery 
life 
of 
your 
system 
because 
the 
28F010 
does not consume 
any power to retain code 
or data when the system is off. Table 4 illustrates 
the 
power dissipated 
when updating 
the 28F010. 


Table 
4. 28F010 Typical 
Update 
Power 
Dlsslpatlon(4) 


Place 
the 
high-frequency, 
low-inherent-inductance 
capacitors 
as close as possible 
to the devices. 
Also, 
for every eight devices, 
a 4.7 IJ-Felectrolytic 
capaci- 
tor 
should 
be placed 
at the 
array's 
power 
supply 
connection, 
between 
Vcc and Vss. The bulk capaci- 
tor will overcome 
voltage 
slumps caused 
by printed- 


Operation 
Notes 
Power 
Dissipation 
(Watt-Seconds) 


Array Program/Program 
Verify 
1 
0.171 


Array Erase/Erase 
Verify 
2 
0.136 


One Complete 
Cycle 
3 
0.478 


NOTES: 
1. 
Formula 
to 
calculate 
typical 
Program/Program 
Verify 
Power 
= 
[Vpp 
x 


11 Bytes 
x 
typical 
11 Prog 
Pulses 
(tWHWH1 x 
IpP2 typical 
+ tWHGL 
X 
IpP4 
typical)] 
+ [VCC x 
11 Bytes 
x 
typical 
11 Prog Pulses 
(tWHWH1 x 
ICC2 typical 
+ tWHGL X ICC4 typical). 
2. Formula 
to calculate 
typical 
Erase/Erase 
Verify 
Power 
= [Vpp (VPP3 typical 


x 
tERASE typical 
+ Ipps typical 
x 
tWHGL X 
11 Bytes)] 
+ [Vcc 
(ICC3 typical 
x 


tERASE typical + Iccs 
typical 
x 
tWHGL X 
11 Bytes)]. 
3. One Complete 
Cycle 
= Array 
Preprogram 
+ Array 
Erase + Program. 


4. "Typicals" 
are not 
guaranteed, 
but based 
on a limited 
number 
of samples 


from 
production 
lots. 


• 


NOTICE: This is a production data sheet. The specifi- 
cations are subject to change without notice. 


• WARNING: Stressing the device beyond the "Absolute 
Maximum 
Ratings" 
may 
cause 
permanent 
damage. 


These are stress ratings 
only. Operation 
beyond 
the 
"Operating 
Conditions" 
is not recommended 
and ex- 


tended 
exposure 
beyond 
the 
"Operating 
Conditions" 


may affect device reliability. 


Operating 
Temperature 
During Read 
0°Cto 
+70°C(1) 
During Erase/Program 
O°C to + 70°C(1) 


Operating 
Temperature 


During Read 
-40°C 
to + 85°C(2) 
During Erase/Program 
-40°C 
to + 85°C(2) 
Temperature 
Under Bias 
-10°C 
to + 80°C(1) 


Temperature 
Under Bias 
- 50°C to + 95°C(2) 
Storage Temperature 
-65°C 
to + 125°C 


Voltage 
on Any Pin with 
Respect 
to Ground 
- 2.0V to + 7.0V(3) 
Voltage 
on Pin Ag with 
Respect 
to Ground 
- 2.0V to + 13.5V(3, 4) 
Vpp Supply Voltage 
with 
Respect 
to Ground 
During Erase/Program 
.... 
- 2.0V to + 14.0V(3, 4) 
Vcc 
Supply Voltage 
with 
Respect 
to Ground 
- 2.0V to + 7.0V(3) 
Output Short Circuit Current. 
100 mA(5) 


NOTES: 
1. Operating 
Temperature 
is for commercial 
product 
as defined 
by this specification. 


2. Operating 
Temperature 
is for extended 
temperature 
products 
as defined 
by this specification. 


3. Minimum 
DC input voltage 
is -0.5V. 
During transitions, 
inputs may undershoot 
to - 2.0V for periods 
less 
than 20 ns. Maximum 
DC voltage 
on output 
pins is Vcc 
+ 
0.5V, which 
may overshoot 
to Vcc 
+ 
2.0V for 
periods 
less than 20 ns. 


4. Maximum 
DC voltage 
on Ag or Vpp may overshoot 
to + 14.0V for periods 
less than 20 ns. 


5. Output 
shorted 
for no more than one second. 
No more than one output 
shorted 
at a time. 


6. See 
High Speed 
AC Input/Output 
reference 
Waveforms 
and 
High Speed 
AC Testing 
Load Circuits 
for 
testing 
characteristics. 


7. See AC Input/Output 
reference 
Waveforms 
and AC Testing 
Load Circuits for testing 
characteristics. 


Symbol 
Parameter 
Limits 
Unit 
Mln 
Max 


TA 
Operating Temperature 
0 
70 
·C 


TA 
Operating Temperature 
-40 
+85 
·C 


Vcc 
Vcc Supply Voltage (10%) 
4.50 
5.50 
V 


Vcc 
Vcc Supply Voltage (5%) 
4.75 
5.25 
V 


Symbol 
Parameter 
Notes 
Limits 
Unit 
Test Conditions 


Mln 
Typlcal(4) 
Max 


III 
Input Leakage Current 
1 
±1.0 
p.A 
Vcc = VccMax 
VIN = Vcc or Vss 


ILO 
Output Leakage Current 
1 
±10 
p.A 
Vcc = VccMax 
VOUT = Vcc or Vss 


Iccs 
Vcc Standby Current 
1 
0.3 
1.0 
mA 
Vcc = VccMax 
CEll' = VIH 


ICC1 
Vcc Active Read Current 
1 
10 
30 
mA 
Vcc = Vcc Max, CEll' = VIL 
f = 6 MHz, lOUT = 0 mA 


DC CHARACTERISTICS-TTL/NMOS 
COMPATIBLE-Commercial 
Products 
(Continued) 


Symbol 
Parameter 
Notes 
Limits 
Unit 
Test' Conditions 


Mln 
Typlcal(4) 
Max 


ICC2 
Vcc Programming 
Current 
1,2 
1.0 
10 
mA 
Programming 
in Progress 


ICC3 
Vcc Erase Current 
1,2 
5.0 
15 
mA 
Erasure in Progress 


ICC4 
Vcc Program Verify Current 
1,2 
5.0 
15 
mA 
Vpp = VpPH, Program 
Verify in Progress 


ICC5 
Vcc Erase Verify Current 
1,2 
5.0 
15 
mA 
Vpp = VPPH, Erase 
Verify in Progress 


Ipps 
Vpp Leakage Current 
1 
±10 
",A 
Vpp ~ Vcc 


IpPl 
VppRead 
Current 
1 
90 
200 
",A 
Vpp> 
Vcc 


or Standby Current 
±10.0 
Vpp ~ Vcc 


IpP2 
Vpp Programming 
Current 
1,2 
B.O 
30 
mA 
Vpp = VPPH 
Programming 
in Progress 


IpP3 
Vpp Erase Current 
1,2 
6.0 
30 
mA 
Vpp = VPPH 
Erasure in Progress 


IpP4 
Vpp Program Verify Current 
1,2 
2.0 
5.0 
mA 
Vpp = VPPH, Program 


- 
Verify in Progress 


IpP5 
Vpp Erase Verify Current 
1,2 
2.0 
5.0 
mA 
Vpp = VPPH, Erase 
Verify in Progress 


Vil 
Input Low Voltage 
-0.5 
O.B 
V 


VIH 
Input High Voltage 
2.0 
Vcc + 0.5 
V 


VOL 
Output Low Voltage 
0.45 
V 
IOl = 5.B mA 
Vcc = VccMin 


VOHl 
Output High Voltage 
2.4 
V 
IOH = -2.5mA 
Vcc = VccMin 


VIO 
Ag Intelligent 
Identifer Voltage 
11.50 
13.00 
V 


110 
Ag Intelligent 
Identifier 
Current 
1,2 
90 
200 
",A 
Ag = VIO 


VPPl 
Vpp during Read-Only 
0.00 
6.5 
V 
NOTE: Erase/Program 
are 
Operations 
Inhibited when Vpp = VPPl 


VPPH 
Vpp during Read/Write 
11.40 
12.60 
V 


Operations 


VlKO 
Vcc Erase/Write 
Lock Voltage 
2.5 
V 


Symbol 
Parameter 
Notes 
Limits 
Unit 
Test Conditions 


Mln 
Typlcal(4) 
Max 


III 
Input Leakage Current 
1 
± 1.0 
",A 
Vcc = VccMax 
VIN = Vcc or VSS 


ILO 
Output Leakage Current 
1 
±10 
",A 
VCC = VCCMax 
VOUT = Vcc or VSS 


Iccs 
Vcc Standby 
Current 
1 
50 
100 
",A 
Vcc = VccMax 
CE# 
= Vcc 
±0.2V 


ICCl 
Vcc Active Read Current 
1 
10 
30 
mA 
Vcc = Vcc Max, CE# 
= Vil 


f = 6 MHz, lOUT = 0 mA 


• 
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Symbol 
Parameter 
Notes 
Limits 
Unit 
Test Conditions 


Mln 
Typlcal(4) 
Max 


ICC2 
Vcc 
Programming 
Current 
1,2 
1.0 
10 
mA 
Programming 
in Progress 


ICC3 
Vcc 
Erase Current 
1,2 
5.0 
15 
mA 
Erasure 
in Progress 


ICC4 
Vcc 
Program 
Verify Current 
1,2 
5.0 
15 
mA 
Vpp = VPPH, Program 


Verify in Progress 


Iccs 
Vcc 
Erase Verify Current 
1,2 
5.0 
15 
mA 
Vpp = VPPH, Erase 


Verify in Progress 


Ipps 
Vpp leakage 
Current 
1 
±10 
p.A 
Vpp"; 
Vcc 


IpP1 
Vpp Read Current, 
10 
1 
90 
200 
p.A 
Vpp> 
Vcc 
Current or Standby 
Current 
±10 
Vpp"; 
VCC 


IpP2 
Vpp Programming 
1,2 
8.0 
30 
mA 
Vpp = VPPH 


Current 
Programming 
in Progress 


IpP3 
Vpp Erase Current 
1,2 
6.0 
30 
mA 
Vpp = VPPH 


Erasure in Progress 


IpP4 
Vpp Program 
Verify 
1,2 
2.0 
5.0 
mA 
Vpp = VPPH, Program 


Current 
Verify in Progress 


Ipps 
Vpp Erase Verify 
1,2 
2.0 
5.0 
mA 
Vpp = VPPH, Erase 


Current 
Verify in Progress 


VIL 
Input low 
Voltage 
-0.5 
0.8 
V 


VIH 
Input High Voltage 
0.7Vcc 
Vcc + 0.5 
V 


VOL 
Output 
low 
Voltage 
0.45 
V 
IOL = 5.8 mA 


Vcc = VccMin 


VOH1 
Output 
High Voltage 
0.85Vcc 
V 
IOH = -2.5 
mA, Vcc = Vcc 
Min 


VOH2 
Vcc 
- 
0.4 
IOH = -100 
p.A, Vcc = Vcc 
Min 


VIO 
Ag Intelligent 
Identifer 
11.50 
13.00 
V 


Voltage 


110 
Ag Intelligent 
Identifier 
1,2 
90 
200 
p.A 
Ag = VIO 


Current 


VPPL 
Vpp during Read-Only 
0.00 
6.5 
V 
NOTE: Erase/Programs 
are 


Operations 
Inhibited 
when VPP = VPPL 


VpPH 
VPP during Read/Write 
11.40 
12.60 
V 


Operations 


VLKO 
Vcc Erase/Write 
lock 
2.5 
V 


Voltage 


DC CHARACTERISTICs-TTL/NMOS 
COMPATIBLE-Extended 
Temperature 
Products 


Symbol 
Parameter 
Notes 
Limits 
Unit 
Test Conditions 
Mln 
Typical(4) 
Max 


III 
Input Leakage Current 
1 
± 1.0 
JJ-A Vcc = VccMax 


VIN = VccorVss 


ILO 
Output Leakage Current 
1 
±10 
JJ-AVcc = VccMax 


VOUT = Vcc or Vss 


Iccs 
Vcc Standby Current 
1 
0.3 
1.0 
mA Vcc = VccMax 


CE# 
= VIH 


ICCl 
Vcc Active Read Current 
1 
10 
30 
mA Vcc = Vcc Max, CE# 
= VIL 
f = 6 MHz, lOUT = 0 mA 


ICC2 
Vcc Programming 
Current 
1,2 
1.0 
30 
mA Programming 
in Progress 


ICC3 
Vcc Erase Current 
1,2 
5.0 
30 
mA Erasure in Progress 


Icc4 
Vcc Program Verify Current 
1,2 
5.0 
30 
mA Vpp = VPPH, Program 
Verify in Progress 


Iccs 
Vcc Erase Verify Current 
1,2 
5.0 
30 
mA Vpp = VPPH, Erase 


Verify in Progress 


Ipps 
Vpp Leakage Current 
1 
±10 
JJ-A Vpp:S: Vcc 


IpP1 
Vpp Read Current 
1 
90 
200 
JJ-A Vpp> 
Vcc 
or Standby 
Current 
±10.0 
Vpp:S: Vcc 


IpP2 
Vpp Programming 
Current 
1,2 
8.0 
30 
mA Vpp = VPPH 
Programming 
in Progress 


IpP3 
Vpp Erase Current 
1,2 
6.0 
30 
mA Vpp = VPPH 
Erasure in Progress 


IpP4 
Vpp Program Verify Current 
1,2 
2.0 
5.0 
mA Vpp = VPPH, Program 


Verify in Progress 


Ipps 
Vpp Erase Verify Current 
1,2 
2.0 
5.0 
mA Vpp = VPPH, Erase 


Verify in Progress 


VIL 
Input Low Voltage 
-0.5 
0.8 
V 


VIH 
Input High Voltage 
2.0 
VCC + 0.5 
V 


VOL 
Output 
Low Voltage 
0.45 
V 
IOL = 5.8 mA 
Vcc = VccMin 


VOHl 
Output 
High Voltage 
2.4 
V 
IOH = -2.5 
mA 


VCC = VCCMin 


VIO 
Ag Intelligent 
Identifer 
Voltage 
11.50 
13.00 
V 


liD 
Aglntelligent 
Identifier Current 
1,2 
90 
500 
JJ-AAg = VIO 


VPPL 
Vpp during Read-Only 
0.00 
6.5 
V 
NOTE: Erase/Program 
are 


Operations 
Inhibited when Vpp = VPPL 


VpPH 
Vpp during Read/Write 
11.40 
12.60 
V 
Operations 


VLKO 
Vcc Erase/Write 
Lock Voltage 
2.5 
V 


• 


Symbol 
Parameter 
Notes 
Limits 
Unit 
Test Conditions 
Mln 
Typlcal(4) 
Max 


III 
Input Leakage 
1 
± 1.0 
IJ-A Vcc = VccMax 


Current 
VIN = Vcc or Vss 


ILO 
Output 
Leakage 
1 
±10 
IJ-A Vcc = VccMax 


Current 
VOUT = Vcc or Vss 


Iccs 
VtcStandby 
1 
50 
100 
IJ-A Vcc = VccMax 


Current 
CE# = Vcc 
±0.2V 


ICCl 
Vcc Active Read 
1 
10 
30 
mA 
Vcc = Vcc Max, CE# 
= VIL 


Current 
f = 10 MHz, lOUT = 0 mA 


ICC2 
Vcc Programming 
1,2 
1.0 
10 
mA 
Programming 
in Progress 
Current 


ICC3 
Vcc Erase Current 
1,2 
5.0 
30 
mA 
Erasure in Progress 


ICC4 
Vcc Program Verify 
1,2 
5.0 
30 
mA 
Vpp = VpPH, Program 
Current 
Verify in Progress 


ICC5 
Vcc Erase Verify 
1,2 
5.0 
30 
mA 
Vpp = VPPH, Erase 
Current 
Verify in Progress 


Ipps 
Vpp Leakage Current 
1 
±10 
IJ-A Vpp:S: Vcc 


IpPl 
Vpp Read Current, 
1 
90 
200 
IJ-A Vpp> 
Vcc 
10 Current or 
±10 
Vpp:S: Vcc 
Standby 
Current 


IpP2 
Vpp Programming 
1,2 
8.0 
30 
mA 
Vpp = VPPH 


Current 
Programming 
in Progress 


IpP3 
Vpp Erase Current 
1,2 
6.0 
30 
mA 
Vpp = VPPH 
Erasure in Progress 


IpP4 
Vpp Program Verify 
1,2 
2.0 
5.0 
mA 
Vpp = VPPH, Program 
Current 
Verify in Progress 


IpP5 
Vpp Erase Verify 
1,2 
2.0 
5.0 
mA 
Vpp = VPPH, Erase 
Current 
Verify in Progress 


VIL 
Input Low Voltage 
-0.5 
0.8 
V 


VIH 
Input High Voltage 
0.7 Vcc 
Vcc + 0.5 
V 


VOL 
Output Low Voltage 
0.45 
V 
IOL = 5.8 mA 
Vcc = VccMin 


VOHl 
Output High Voltage 
0.85 Vcc 
IOH = - 2.5 mA, 
Vcc = VccMin 


VOH2 
V 
Vcc 
- 
0.4 
IOH = -100 
IJ-A, 


Vcc = VccMin 


VIO 
Ag Intelligent 
Identifer 
11.50 
13.00 
V 
Voltage 


110 
Ag Intelligent 
Identifier 
1,2 
90 
500 
IJ-A Ag = VIO 
Current 


DC CHARACTERISTICS-CMOS 
COMPATIBLE-Extended 
Temperature 


Products (Continued) 


Symbol 
Parameter 
Notes 
limits 
Unit 
Test Conditions 
Mln 
Typlcal(4) 
Max 


VPPL 
Vpp during Read-Only 
0.00 
6.5 
V 
NOTE: Erase/Programs 
are 
Operations 
Inhibited when Vpp = VPPL 


VPPH 
Vpp during Read/Write 
11.40 
12.60 
V 
Operations 


VLKO 
Vcc Erase/Write 
Lock 
2.5 
V 
Voltage 


Symbol 
Parameter 
Notes 
Limits 
Unit 
Conditions 
Min 
Max 


CIN 
Address/Control 
Capacitance 
3 
8 
pF 
VIN = OV 


COUT 
Output Capacitance 
3 
12 
pF 
VOUT = OV 


NOTES: 
1. All currents 
are in RMS unless 
otherwise 
noted. 
Typical 
values 
at Vcc = S.OV, Vpp = 12.0V, T = 2S·C. These 
currents 
are valid for all product 
versions 
(packages 
and speeds). 


2. Not 100% 
tested: 
characterization 
data available. 
3. Sampled, 
not 100% 
tested. 


4. "Typicals" 
are not guaranteed, 
but based 
on a limited 
number 
of samples 
from 
production 
lots. 


AC TESTING 
INPUT IOUTPUT 


WAVEFORM(1) 


2.4--IN-P-U-TX~:~> 
pif~is < 
0.45 
i 
~:~ OUTPUT 


290207-7 


AC test inputs are driven at VOH (2.4 VntJ 
for a Logic 
"1" and VOL (0.45 VnLl 
for a Logic "0". Input timing 


begins at VIH(2.0 VntJ 
and VIL(0.8 VntJ. 
Output tim· 


ing ends at VIHand VIL.Input rise and fall times (10% 
to 90%) <10 ns. 


CL = 100 pF 
CL includes Jig Capacitance 
RL ~ 
3.3 Kfi 


HIGH SPEED 
AC TESTING 
INPUT IOUTPUT 


WAVEFORM(2) 


3.0--IN-P-U •••. 
T)(.5 
_ 
TEST::POINTS 
-)(.5 
OUTPUT 


0.0 


290207-8 


AC test inputs are driven at 3.0V for a Logic "1" and 
O.OV for a Logic "0". Input timing begins, and output 
timing ends, at 1.5V. Input rise and fall times (10% to 
90%) <10 ns. 


CL~30pF 
CL includes Jig Capacitance 
RL = 3.3 Kfi 


Input Rise and Fall Times (10% to 90%) 
10 ns 


Input Pulse Levels 
0.45Vand 
2.4V 


Input Timing Reference 
Level 
O.BV and 2.0V 


Output Timing Reference 
Level 
O.BV and 2.0V 


Capacitive 
Load 
100 pF 


NOTES: 
1. Testing characteristics for 28F010-65 
in standard configuration, and 28F010-90, 
28F010-120, 
and 28F010-150. 
2. Testing characteristics for 28F010-65 
in high speed configuration. 


Input Rise and Fall Times (10% to 90%) 
10 ns 


Input Pulse Levels 
O.OVand 3.0V 


Input Timing Reference 
Level 
1.5V 


Output Timing Reference 
Level 
1.5V 


Capacitive 
Load 
30 pF 


Versions 
Vcc ± 5% 
28F010-65(4) 


Vcc ± 10% 
28F010-65(5) 
28F01O-91){5) 
28F01o-121){5) 
28FO 10-151){5) 
Unit 


Symbol 
Characteristic 
Notes 
Mln 
Max 
Mln 
Max 
Mln 
Max 
Mln 
Max 
Mln 
Max 


tAVAV/tRC 
Read Cycle Time 
65 
70 
90 
120 
150 
ns 


tELQV/teE 
Chip Enable Access Time 
65 
70 
90 
120 
150 
ns 


tAVQV/tACC 
Address 
Access 
Time 
65 
70 
90 
120 
150 . 


ns 


IGLQV/toE 
Output Enable Access Time 
25 
28 
35 
50 
55 
ns 


tELQX/tLZ 
Chip Enable to Low Z 
2,3 
0 
0 
ns 


tEHQZ 
Chip Disable to Output 
2 
35 
40 
45 
55 
55 
ns 


in HighZ 


tGLQX/toLZ 
Output 
Enable to Output 
2,3 
0 
0 
0 
ns 


in LowZ 


IGHQZ/tOF 
Output Disable to Output 
2 
30 
30 
30 
30 
35 
ns 


in HighZ 


toH 
Output Hold from Address, 
1,2 
0 
0 
0 
ns 
CE # , or OE # Change 


tWHGL 
Write Recovery 
Time 
6 
6 
6 
6 
6 
J.Ls 


before 
Read 


NOTES: 
1. Whichever 
occurs 
first. 


2. Sampled, 
not 100% 
tested. 
3. Guaranteed 
by design. 
4. See High Speed 
AC Input/Output 
reference 
Waveforms 
and High Speed AC Testing 
Load Circuits 
for testing 
characteristics. 
5. See AC Input/Output 
reference 
Waveforms 
and AC Testing 
Load Circuits 
for testing 
characteristics. 


I 


--€: 


'clOV (10,) 
hov 
(te,) 


'clOX 
(lolZ) --j 
hox 
(\.2) 


Versions 
Vcc ± 5% 
28F01lHi5(4) 


Vcc ± 10% 
28FO 10-65(5) 
28FO 10-90(5) 
28F010-120(5) 
28F010-150(5) 
Unit 


Symbol 
Characteristic 
Notes 
Mln 
Max 
Mln 
Max 
Mln 
Max 
Mln 
Max 
Mln 
Max 


tAYAy/tWC 
Write Cycle Time 
65 
70 
90 
120 
150 
ns 


tAVWL/tAS 
Address 
Set-Up Time 
0 
0 
0 
0 
0 
ns 


tWLAX/tAH 
Address 
Hold Time 
40 
40 
40 
40 
40 


ns 
6 
55 


tOVWH/tOS 
Data Set-Up Time 
40 
40 
40 
40 
40 
ns 
6 
55 


tWHOX/tOH 
Data Hold Time 
10 
10 
10 
10 
10 
ns 


tWHGL 
Write Recovery 
Time 
6 
6 
6 
6 
6 
",s 
before 
Read 


tGHWL 
Read Recovery 
Time 
2 
0 
0 
0 
0 
0 
ns 


before Write 


tELWL/tes 
Chip Enable Set-Up Time 
15 
15 
15 
15 
15 
ns 


before Write 


tWHEH/tcH 
Chip Enable Hold Time 
0 
0 
0 
0 
0 
ns 


tWLWH/tWP 
Write Pulse Width 
40 
40 
40 
60 
60 
ns 
6 
55 


tWHWL/tWPH 
Write Pulse Width High 
20 
20 
20 
20 
20 
ns 


tWHWH1 
Duration of Programming 
3 
10 
10 
10 
10 
10 
",s 
Operation 


tWHWH2 
Duration of Erase 
3 
9.5 
9.5 
9.5 
9.5 
9.5 
ms 


Operation 


tYPEL 
Vpp Set-Up Time to 
2 
1 
1 
1 
1 
1 
",s 
Chip Enable Low 


NOTES: 
1. Read timing characteristics 
during read/write 
operations 
are the same as during read-only 
operations. 
Refer to AC Characteristics 
for Read-Only 
Operations. 


2. Guaranteed 
by design. 


3. The integrated 
stop timer terminates 
the programming/erase 
operations. 
thus eliminating 
the need for a maximum 
specification. 


4. See High Speed AC Input/Output 
reference 
Waveforms 
and High Speed AC Testing 
Load Circuits 
for testing 
characteristics. 


5. See AC Input/Output 
reference 
Waveforms 
and AC Testing 
Load Circuits for testing 
characteristics. 
6. Minimum 
specification 
for Extended 
Temperature 
product. 
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PROGRA~ 
VERIFY 


CO~~AND 


."Iii 
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III 
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'llo 
ea 
iiJ335· 
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III 


ERASE 
VERIFY 
COMMANO 
--c( 


Versions 
Vcc ± 5% 
28F010-65(2,4) 


Vcc ± 10% 
28FO 10-65(5) 
28F01Q-9()(5) 
28F01Q-12()(5) 
28F01Q-15()(5) 
Unit 


Symbol 
Characteristic 
Notes 
Mln 
Max 
Mln 
Max 
Mln 
Max 
Mln 
Max 
Mln 
Max 


tAVAV 
Write Cycle Time 
65 
70 
90 
120 
150 
ns 


tAVEL 
Address 
Set-Up Time 
0 
0 
0 
0 
0 
ns 


tELAX 
Address 
Hold Time 
45 
45 
45 
55 
55 


ns 


6 
60 


tOVEH 
Data Set-Up Time 
35 
35 
35 
45 
45 
ns 
6 
50 


tEHOX 
Data Hold Time 
10 
10 
10 
10 
10 
ns 


tEHGL 
Write Recovery 
Time 
6 
6 
6 
6 
6 
!'-S 
before Read 


tGHWL 
Read Recovery 
Time 
2 
0 
0 
0 
0 
0 
ns 
before Write 


tWLEL 
Write Enable Set-Up Time 
0 
0 
0 
0 
0 
ns 


before Chip Enable 


tEHWH 
Write Enable Hold Time 
0 
0 
0 
0 
0 
ns 


tELEH 
Write Pulse Width 
45 
45 
45 
70 
70 
ns 
6 
60 


tEHEL 
Write Pulse Width High 
20 
20 
20 
20 
20 
ns 


tEHEH1 
Duration of Programming 
3 
10 
10 
10 
10 
10 
!'-S 
Operation 


tEHEH2 
Duration of Erase 
3 
9.5 
9.5 
9.5 
9.5 
9.5 
ms 
Operation 


tVPEL 
Vpp Set-Up Time to Chip 
2 
1 
1 
1 
1 
1 
!'-S 
Enable Low 


NOTE: 
1. Read timing characteristics 
during read/write 
operations 
are the same as during 
read-only 
operations. 
Refer to AC Characteristics 
for Read-Only 
Operations. 


2. Guaranteed 
by design. 


3. The integrated 
stop timer terminates 
the programming/erase 
operations, 
thus eliminating 
the need for a maximum 
specification. 


4. See High Speed AC Input/Output 
reference 
Waveforms 
and High Speed AC Testing 
Load Circuits 
for testing 
characteristics. 


5. See AC Input/Output 
reference 
Waveforms 
and AC Testing 
Load Circuits 
for testing 
characteristics. 


·6. Minimum 
specification 
for Extended 
Temperature 
product. 
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Parameter 
Notes 
Mln 
Typical 
Max 
Unit 


Chip Erase Time 
1,3,4 
2 
30 
Sec 
1,2,4 
4 
25 
Sec 


NOTES: 
1. "Typicals" 
are not guaranteed, 
but based on samples 
from production 
lots. Data taken 
at 25°C, 12.0V Vpp. 


2. Minimum 
byte 
programming 
time 
excluding 
system 
overhead 
is 16 ",sec 
(10 ",sec 
program 
+ 6 ",sec 
write 
recovery), 


while 
maximum 
is 400 ",sec/byte 
(16 ",sec 
x 25 loops 
allowed 
by algorithm). 
Max chip programming 
time is specified 
lower 
than the worst 
case allowed 
by the programming 
algorithm 
since most bytes program 
significantly 
faster 
than the worst 
case 
byte. 
3. Excludes 
OOH programming 
prior to erasure. 
4. Excludes 
system 
level overhead. 
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TEMPERATURE 
JL PACKAGE 
L-,---J 


T = EXTENDED (-400C 
to 
+850C) 
P = 32-PIN 
PLASTIC 
DIP L 
ACCESS SPEED (ns) 


BLANK = COMMERCIAL 
(DOC to 
+700C) 
N = 32-LEAD 
PLCC 
120ns 
E = STANDARD 
32-LEAD 
TSOP 
150 ns 
F = REVERSE 32-LEAD 
TSOP 


VALID 
COMBINATIONS: 
P28F010-65 
N28F010-65 
P28F010-90 
N28F010-90 
P28F010-120 
N28F010-120 
P28F010-150 
N28F010-150 


E28F010-65 
E28F010-90 
E28F010-120 
E28F010-150 


F28F010-65 
F28F010-90 
F28F010-120 
F28F010-150 


"ETOX 
Flash Memory 


Technology" 


"Intel 
Flash Memory" 


"ETOX 
III Flash Memory 


Technology" 


"ETOX 
Flash Memory 
Reliability 
Data Summary" 


"Using 
Flash Memory for 
In-System 
Reprogrammable 
Nonvolatile 
Storage" 


"Guide 
to Flash Memory 


Reprogramming" 


REVISION 
HISTORY 


Order 
Number 
294005 


ER-24, 


ER-28, 


294008 


294012 


Number 
Description 


007 
Removed 
200 ns Speed Bin 
Revised 
Erase Maximum 
Pulse Count for Figure 5 from 3000 to 1000 
Clarified AC and DC Test Conditions 
Added "dimple" 
to F TSOP Package 
Corrected 
Serpentine 
Layout 


008 
Corrected 
AC Waveforms 
Added Extended 
Temperature 
Options 


009 
Added 28F01 0-65 and 28F01 0-90 speeds 
Revised Symbols, 
i.e., CE, OE, etc. to CE #. OE #, etc. 
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28F512 
512K (64K x 8) CMOS FLASH MEMORY 
• Flash Electrical 
Chip-Erase 
• Command 
Register 
Architecture 
for 
- 
1 Second 
Typical 
Chip-Erase 
Microprocessor 
/Microcontroller 
• Quick-Pulse 
Programming 
Algorithm 
Compatible 
Write Interface 


- 
10 J-LsTypical 
Byte-Program 
• Noise Immunity 
Features 
- 
1 Second 
Chip-Program 
- 
± 10% Vcc Tolerance 
• 100,000 Erase/Program 
Cycles 
- 
Maximum 
Latch-Up 
Immunity 
through 
EPI Processing 
• 12.0V ±5% Vpp 
ETOX II Nonvolatile 
Flash Technology 
• 
• High-Performance 
Read 
- 
EPROM-Compatible 
Process 
Base 
- 
120 ns Maximum 
Access Time 
- 
High~VolumeManufacturing 
• CMOS Low Power Consumption 
Experience 
-10 
mA Typical 
Active Current 
• JEDEC-Standard 
Pinouts 
- 
50 J-LATypical 
Standby 
Current 
- 
32-Pin Plastic Dip 
- 
OW Data Retention 
Power 
- 
32-Lead 
PLCC 
• Integrated 
Program/Erase 
Stop Timers 
(See 
Packaging 
Spec., 
Order 
#231369) 
• Extended 
Temperature 
Options 


Intel's 
28F512 
CMOS 
flash 
memory 
offers 
the 
most 
cost-effective 
and 
reliable 
alternative 
for 
read/write 
random 
access 
nonvolatile 
memory. 
The 28F512 
adds electrical 
chip-erasure 
and reprogramming 
to familiar 
EPROM technology. 
Memory 
contents 
can be rewritten: 
in a test socket; 
in a PROM-programmer 
socket; 
on- 


board 
during 
subassembly 
test; in-system 
during final test; and in-system 
after-sale. 
The 28F512 
increases 
memory 
flexibility, 
while contributing 
to time- and cost-savings. 


The 28F512 
is a 512-kilobit 
nonvolatile 
memory 
organized 
as 65,536 bytes of 8 bits. Intel's 28F512 
is offered 
in 32-pin plastic 
dip or 32-lead 
PLCC packages. 
Pin assignments 
conform 
to JEDEC 
standards 
for byte-wide 
EPROMs. 


Extended 
erase and program 
cycling 
capability 
is designed 
into Intel's 
ETOX II (EPROM 
Tunnel 
Oxide) 
pro- 


cess technology. 
Advanced 
oxide processing, 
an optimized 
tunneling 
structure, 
and lower electric 
field com- 
bine to extend 
reliable 
cycling 
beyond 
that of traditional 
EEPROMs. 
With the 12.0V Vpp supply, the 28F512 


performs 
100,000 
erase and program 
cycles 
well within the time limits of the Quick-Pulse 
Programming 
and 


Quick-Erase 
algorithms. 


Intel's 28F512 
employs 
advanced 
GMOS circuitry 
for systems 
requiring 
high-performance 
access 
speeds, 
low 
power consumption, 
and immunity 
to noise. Its 120 nanosecond 
access time provides 
no-WAlT-state 
perform- 
ance for a wide range of microprocessors 
and microcontrollers. 
Maximum 
standby 
current 
of 100 IJ-Atrans- 
lates into power 
savings 
when the device 
is deselected. 
Finally, the highest 
degree 
of latch-up 
protection 
is 


achieved 
through 
Intel's 
unique EPI processing. 
Prevention 
of latCh-up is provided 
for stresses 
up to 100 mA 


on address 
and data pins, from -W to VCC + 1V. 


With Intel's ETOX II process 
base, the 28F512 
levers years of EPROM experience 
to yield the highest levels of 
quality, 
reliability, 
and cost-effectiveness. 
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Symbol 
Type 
Name and Function 


Ao-A15 
INPUT 
ADDRESS 
INPUTS for memory addresses. 
Addresses 
are internally 
latched during a write cycle. 


DQO-DQ7 
INPUT /OUTPUT 
DATA INPUT/OUTPUT: 
Inputs data during memory write cycles; 
outputs data during memory read cycles. The data pins are active high 
and float to tri-state 
OFF when the chip is deselected 
or the outputs 
are disabled. 
Data is internally 
latched during a write cycle. 


CE# 
INPUT 
CHIP ENABLE: Activates 
the device's 
control 
logic, input buffers, 


decoders 
and sense amplifiers. 
CE # is active low; CE # high 
deselects 
the memory device and reduces power consumption 
to 
standby 
levels. 


OE# 
INPUT 
OUTPUT 
ENABLE: Gates the devices output through 
the data buffers 
during a read cycle. OE # is active low. 


WE# 
INPUT 
WRITE 
ENABLE: Controls 
writes to the control 
register and the array. 


Write enable is active low. Addresses 
are latched on the falling edge 
and data is latched on the rising edge of the WE # pulse. 
Note: With Vpp 
:5:: 6.5V, memory contents 
cannot be altered. 


Vpp 
ERASE/PROGRAM 
POWER SUPPLY for writing the command 
register, erasing the entire array, or programming 
bytes in the array. 


Vcc 
DEVICE 
POWER SUPPLY (5V ± 10%) 


Vss 
GROUND 
. 


NC 
NO INTERNAL 
CONNECTION 
to device. Pin may be driven or left 
floating. 


Figure 2. 28F512 
Pin Configurations 


Table 
1. Pin Description 
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The 28F512 flash memory provides nonvolatility 
along with the capability to perform over 100,000 
electrical chip-erasure/reprogram cycles. These fea- 
tures make the 28F512 an innovative alternative to 
disk, EEPROM, and battery-backed static RAM. 
Where periodic updates of code and data-tables are 
required, the 28F512's reprogrammability and non- 
volatility make it the obvious and ideal replacement 
for EPROM. 


Primary applications and operating systems stored 
in flash eliminate the slow disk-to-DRAM download 
process. This results in dramatic enhancement of 
performance and substantial reduction of power 
consumption - 
a consideration particularly impor- 
tant in portable equipment. Flash memory increases 
flexibility with electrical chip erasure and in-system 
update capability of operating systems and applica- 
tion code. With updatable BIOS, system manufactur- 
ers can easily accommodate last-minute changes as 
revisions are made. 


In diskless workstations and terminals, network traf- 
fic reduces to a minimum and systems are instant- 
on. Reliability exceeds that of electromechanical 
media. Often in these environments, power interrup- 
tions force extended re-boot periods for all net- 
worked terminals. This mishap is no longer an issue 
if boot code, operating systems. communication pro- 
tocols and primary applications are flash-resident in 
each terminal. 


For embedded systems that rely on dynamic RAM/ 
disk for main system memory or nonvolatile backup 
storage, the 28F512 flash memory offers a solid 
state alternative in a minimal form factor. The 
28F512 provides higher performance, lower power 
consumption, instant-on capability, and allows an 
"execute in place" memory hierarchy for code and 
data table reading. Additionally, the flash memory is 
more rugged and reliable in harsh environments 
where extreme temperatures and shock can cause 
disk-based systems to fail. 


The need for code updates pervades all phases of a 
system's life - 
from prototyping to system manufac- 
ture to after-sale service. The electrical chip-erasure 
and reprogramming ability of the 28F512 allows in- 


circuit alterability; this eliminates unnecessary han- 
dling and less-reliable socketed connections, while 
adding greater test, manufacture, and update flexi- 
bility. 


Material and labor costs 
associated with 
code 


changes increases at higher levels of system inte- 
gration - 
the most costly being code updates after 


sale. Code "bugs", or the desire to augment system 
functionality, prompt after-sale code updates. Field 
revisions to EPROM-based code requires the re- 
moval of EPROM components or entire boards. With 
the 28F512, code updates are implemented locally 
via an edge-connector, or remotely over a commun- 
cation link. 


For systems curre(ltly using a high-density static 
RAM/battery 
configuration for data accumulation, 


flash memory's inherent nonvolatility eliminates the 
need for battery backup. The concern for battery 
f~ilure no longer exists, an important consideration 
for portable equipment and medical instruments, 
both requiring continuous performance. In addition, 
flash memory offers a considerable cost advantage 
over static RAM. 


Flash memory's electrical chip erasure, byte pro- 
grammability and complete nonvolatility fit well with 
data accumulation and recording needs. Electrical 
chip-erasure gives the designer a "blank slate" in 
which to log or record data. Data can be periodically • 
off-loaded for analysis and the flash memory erased 
producing a new "blank slate". 


A high degree of on-chip feature integration simpli- 
fies memory-to-processor interfacing. Figure 3 de- 
picts two 28F512s tied to the 80C186 system bus. 
The 28F512's architecture minimizes interface cir- 
cuitry needed for complete in-circuit updates of 
memory contents. 


With cost-effective in-system reprogramming, ex- 
tended 
cycling capability, and true nonvolatility, 


the 28F512 offers advantages to the alternatives: 
EPROMs, EEPROMs, battery backed static RAM, 
or disk. EPROM-compatible read specifications, 
straight-forward interfacing, and in-circuit alterability 
offers designers unlimited flexibility to meet the high 
standards of today's designs. 


Flash-memory augments EPROM functionality with 
in-circuit electrical erasure and reprogramming. The 
28F512 introduces a command register to manage 
this new functionality. The command register allows 
for: 100% TTL-Ievel control inputs; fixed power sup- 
plies during erasure and programming; and maxi- 
mum EPROM compatibility. 


In the absence of high voltage on the Vpp pin, the 
28F512 is a read-only memory. Manipulation of the 
external memory-control pins yields the standard 
EPROM read, standby, output disable, and Intelli- 
gent Identifier operations. 


The same EPROM read, standby, and output disable 
operations are available when high voltage is ap- 
plied to the Vpp pin. In addition, high voltage on Vpp 
enables erasure and programming of the device. All 
functions 
associated with altering 
memory con- 


tents-Intelligent 
Identifier, erase, erase verify, pro- 
gram, and program verify-are 
accessed via the 


command register. 


Commands are written to the register using standard 
microprocessor 
write timings. 
Register contents 


serve as input to an internal state-machine which 
controls the erase and programming circuitry. Write 
cycles also internally latch addresses and data 
needed for programming or erase operations. With 
the appropriate command written to the register, 


standard microprocessor read timings output array 
data, access the Intelligent Identifier codes, or out- 
put data for erase and program verification. 


Successive command write cycles define the dura- 
tion of program and erase operations; specifically, 
the program or erase time durations are normally 
terminated by associated program or erase verify 
commands. An integrated stop timer provides simpli- 
fied timing control over these operations; thus elimi- 
nating the need for maximum program/erase timing 
specifications. 
Programming 
and 
erase 
pulse 


durations are minimums only. When the stop timer 
terminates a program or erase operation, the device 
enters an inactive state and remains inactive until 
receiving the appropriate verify or reset command. 


The command register is only active when Vpp is at 
high voltage. Depending upon the application, the 
system designer may choose to make the Vpp pow- 
er supply switchable-available 
only when memory 


updates are desired. When Vpp = VPPL, the con- 
tents of the register default to the read command, 
making the 28F512 a read-only memory. In this 
mode, the memory contents cannot be altered. 


- 


4. 
___ 


Vpp\l) 
Ao 
Ag 
CE# 
OE# 
WE# 
000-0-07 
Operation 


Read 
VPPL 
Ao 
Ag 
VIL 
VIL 
VIH 
Data Out 


Output Disable 
VPPL 
X 
X 
VIL 
VIH 
VIH 
Tri-State 


READ-ONLY 
Standby 
VPPL 
X 
X 
VIH 
X 
X 
Tri-State 


Intelligent Identifier (Mfr)(2) 
VPPL 
VIL 
VID(3) 
VIL 
VIL 
VIH 
Data = 89H 


Intelligent Identifier (Device)(2) 
VPPL 
VIH 
VID(3) 
VIL 
VIL 
VIH 
Data = B8H 


Read 
VPPH 
Ao 
Ag 
VIL 
VIL 
VIH 
Data Out(4) 


READ/WRITE 
Output Disable 
VPPH 
X 
X 
VIL 
VIH 
VIH 
Tri-State 


Standby(5) 
VPPH 
X 
X 
VIH 
X 
X 
Tri-State 


Write 
VPPH 
Ao 
Ag 
VIL 
VIH 
VIL 
Data In(6) 


NOTES: 
1. Refer to DC Characteristics. 
When 
Vpp = VPPL memory 
contents 
can be read but not written 
or erased. 
2. Manufacturer 
and device 
codes 
may also be accessed 
via a command 
register 
write sequence. 
Refer to Table 
3. All other 
addresses 
low. 
3. VID is the Intelligent 
Identifier 
high voltage. 
Refer to DC Characteristics. 
4. Read operations 
with Vpp = VPPH may access 
array data or the Intelligent 
Identifier 
codes. 
5. With Vpp at high voltage, 
the standby 
current 
equals 
lee + Ipp (standby). 
6. Refer to Table 
3 for valid Data-In 
during a write operation. 


7. X can be VIL or VIH. 


Or, the system designer may choose to "hardwire" 
Vpp, 
making the high voltage supply constantly 


available. In this case, all Command Register func- 
tions are inhibited whenever Vcc is below the write 
lockout voltage VLKO. (See Power Up/Down Protec- 
tion). The 28F512 is designed to accommodate ei- 
ther design practice, and to encourage optimization 
of the processor-memory interface. 


The two-step program/ erase write sequence to the 
Command Register provides additional software 
write protection. 


Read 


The 28F512 has two control functions, both of which 
must be logically active, to obtain data at the out- 
puts. Chip-Enable (CE#) is the power control and 
should be used for device selection. Output-Enable 
(OE#) 
is the output control and should be used 


to gate data from the output pins, independent of 
device 
selection. 
Refer 
to 
AC 
read 
timing 


waveforms. 


When Vpp is high (VPPH), the read operation can be 
used to access array data, to output the Intelligent 
Identifier codes, and to access data for program/ 
erase verification. When Vpp is low (VpPU, 
the read 


operation can only access the array data. 


Output Disable 


With Output-Enable at a logic-high level (VIH), output 
from the device is disabled. Output pins are placed 
in a high-impedance state. 


Standby 


With Chip-Enable at a logic-high level, the standby 
operation disables most of the 28F512's circuitry 
and substantially reduces device power consump- 
tion. The outputs are placed in a high-impedance 
state, independent of the Output-Enable signal. 
If the 28F512 is deselected during erasure, pro- 
gramming, 
or 
program/erase 
verification, 
the 


device draws active current until the operation is 
terminated. 


Intelligent 
Identifier 
Operation 


The Intelligent Identifier operation outputs the manu- 
facturer code (89H) and device code (B8H). Pro- 
gramming equipment automatically matches the de- 
vice with its proper erase and programming algo- 
rithms. 


With Chip-Enable and Output-Enable at a logic low 
level, raising A9 to high voltage VID(see DC Charac- 
teristics) activates the operation. Data read from lo- 
cations OOOOHand 0001H represent the manufac- 
turer's code and the device code, respectively. 


The manufacturer- and device-codes can also be 
read via the command register, for instances where 
the 28F512 is erased and reprogrammed in the tar- 
get system. Following a write of 90H to the com- 
mand register, a read from address location OOOOH 
outputs the manufacturer code (89H). A read from 
address 0001H outputs the device code (B8H). 


Device erasure and programming are accomplished 
via the command register, when high voltage is ap- 
plied to the Vpp pin. The contents of the register 
serve as input to the internal state-machine. The 
state-machine outputs dictate the function of the 
device. 


The command register itself does not occupy an ad- 
dressable memory location. The register is a latch 
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used to store the command, along with address and 
data information needed to execute the command. 


The command register is written by bringing Write- 
Enable to a logic-low level (VIU, while Chip-Enable is 
low. Addresses are latched on the falling edge of 
Write-Enable, while data is latched on the rising 
edge of the Write-Enable pulse. Standard microproc- 
essor write timings are used. 


Refer to AC Write Characteristics and the Erase/ 
Programming 
Waveforms 
for 
specific 
timing 


parameters. 


When low voltage is applied to the Vpp pin, the con- 
tents of the command register default to OOH,en- 
abling read-only operations. 


Placing high voltage on the Vpp pin enables read/ 
write operations. Device operations are selected by 
writing specific data patterns into the command reg- 
ister. 
Table 
3 
defines 
these 
28F512 
register 


commands. 


Bus 
First Bus Cycle 
Second Bus Cycle 
Command 
Cycles 
Req'd Operation(1) Address(2) Oata(3) Operation(1) Address(2) Oata(3) 


Read Memory 
1 
Write 
X 
OOH 


Read Intelligent Identifier Code(4) 
3 
Write 
X 
90H 
Read 
(4) 
(4) 


Set-up Erase/Erase(5) 
2 
Write 
X 
20H 
Write 
X 
20H 


Erase Verify(5) 
2 
Write 
EA 
AOH 
Read 
X 
EVD 


Set-up Program/Program(6) 
2 
Write 
X 
40H 
Write 
PA 
PO 


Program Verify(6) 
2 
Write 
X 
COH 
Read 
X 
PVD 


Reset(7) 
2 
Write 
X 
FFH 
Write 
X 
FFH 


NOTES: 
1. Bus operations 
are defined 
in Table 
2. 


2. IA = Identifier 
address: 
OOH for manufacturer 
code, 01 H for device 
code. 


EA = Address 
of memory 
location 
to be read during 
erase verify. 


PA = Address 
of memory 
location 
to be programmed. 
Addresses 
are latched 
on the falling 
edge of the Write-Enable 
pulse. 
3. 10 = Data read from 
location 
IA during 
device 
identification 
(Mfr = 89H, Device = B8H). 


EVD = Data read from 
location 
EA during 
erase verify. 


PO = Data to be programmed 
at location 
PA. Data is latched 
on the rising edge of Write-Enable. 


PVD = Data read from 
location 
PA during 
program 
verify. 
PA is latched 
on the Program 
command. 


4. Following 
the Read Intelligent 
10 command, 
two read operations 
access 
manufacturer 
and device 
codes. 


5. Figure 
5 illustrates 
the Quick-Erase 
algorithm. 


6. Figure 4 illustrates 
the Quick-Pulse 
Programming 
algorithm. 
7. The second 
bus cycle 
must be followed 
by the desired 
command 
register 
write. 
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While Vpp is high, for erasure and programming, 
memory contents can be accessed via the read 
command. The read operation is initiated by writing 
OOH into the command register. Microprocessor 
read cycles retrieve array data. The device remains 
enabled for reads until the command register con- 
tents are altered. 


The default contents of the register upon Vpp pow- 
er-up is OOH.This default value ensures that no spu- 
rious alteration of memory contents occurs during 
the Vpp power transition. Where the Vpp supply is 
hard-wired to the 28F512, the device powers-up and 
remains enabled for reads until the command-regis- 
ter contents are changed. Refer to the AC Read 
Characteristics and Waveforms for specific timing 
parameters. 


Flash-memories are intended for use in applications 
where the local CPU alters memory contents. As 
such, manufacturer- and device-codes must be ac- 
cessible while the device resides in the target sys- 
tem. PROM programmers typically access signature 
codes by raising A9 to a high voltage. However, mul- 
tiplexing high voltage onto address lines is not a de- 
sired system-design practice. 


The 28F512 contains an Intelligent Identifier opera- 
tion to supplement traditional PROM-programming 
methodology. The operation is initiated by writing 
90H into the command register. Following the com- 
mand write, a read cycle from address OOOOHre- 
trieves the manufacturer code of 89H. A read cycle 
from address 0001H returns the device code of 
88H. To terminate the operation, it is necessary to 
write another valid command into the register. 


Set-up 
Erase/Erase 
Commands 


Set-up Erase is a command-only operation that 
stages the device for electrical erasure of all bytes in 
the array. The set-up erase operation is performed 
by writing 20H to the command register. 


To commence chip-erasure, the erase command 
(20H) must again be written to the register. The 
erase operation begins with the rising edge of the 
Write-Enable pulse and terminates with the rising 
edge of the next Write-Enable pulse (Le.,Erase-Veri- 
fy Command). 


This two-step sequence of set-up followed by execu- 
tion ensures that memory contents are not acciden- 
tally erased. Also, chip-erasure can only occur when 
high voltage is applied to the Vpp pin. In the absence 


of this high voltage, memory contents are protected 
against erasure. Refer to AC Erase Characteristics 
and Waveforms for specific timing parameters. 


Erase-Verify 
Command 


The erase command erases all bytes of the array in 
parallel. After each erase operation, all bytes must 
be verified. The erase verify operation is initiated by 
writing AOHinto the command register. The address 
for the byte to be verified must be supplied as it is 
latched on the falling edge of the Write-Enable 
pulse. The register write terminates the erase opera- 
tion with the rising edge of its Write-Enable pulse. 


The 28F512 applies an internally-generated margin 
voltage to the addressed byte. Reading FFH from 
the addressed byte indicates that all bits in the byte 
are erased. 


The erase-verify command must be written to the 
command register prior to each byte verification to 
latch its address. The process continues for each 
byte in the array until a byte does not return FFH 
data, or the last address is accessed. 


In the case where the data read is not FFH, another 
erase operation is performed. (Refer to Set-up 
Erase/Erase). Verification then resumes from the 
address of the last-verified byte. Once all bytes in 
the array have been verified, the erase step is com- 
plete. The device can be programmed. At this point, 
the verify operation is terminated by writing a valid 
command (e.g. Program Set-up) to the command 
register. Figure 5, the Quick-Erase algorithm, illus- 
trates how commands and bus operations are com- 
bined to perform electrical erasure of the 28F512. 
Refer to AC Erase Characteristics and Waveforms 
for specific timing parameters. 


Set-up 
Program/Program 
Commands 


Set-up program is a command-only operation that 
stages the device for byte programming. Writing 40H 
into the command register performs the set-up 
operation. 


Once the program set-up operation is performed, 
the next Write-Enable pulse causes a transition to 
an active programming operation. Addresses are in- 
ternally latched on the falling edge of the Write-En- 
able pulse. Data is internally latched on the rising 
edge of the Write-Enable pulse. The rising edge of 
Write-Enable also begins the programming opera- 
tion. The programming operation terminates with the 
next rising edge of Write-Enable, used to write the 
program-verify command. Refer to AC Programming 
Characteristics and Waveforms for specific timing 
parameters. 


Program-Verify 
Command 


The 28F512 is programmed on a byte-by-byte basis. 
Byte programming may occur sequentially or at ran- 
dom. Following each programming operation, the 
byte just programmed must be verified. 


The program-verify operation is initiated by writing 
COH into the command register. The register write 
terminates the programming operation with the ris- 
ing edge of its Write-Enable pulse. The program-ver- 
ify operation stages the device for verification of the 
byte last programmed. No new address information 
is latched. 


The 28F512 applies an internally-generated margin 
voltage to the byte. A microprocessor read cycle 
outputs the data. A successful comparison between 
the programmed byte and true data means that the 
byte is successfully programmed. Programmingthen 
proceeds to the next desired byte location. Figure 4, 
the 28F512 Quick-Pulse Programming algorithm, il- 
lustrates how commands are combined with bus op- 
erations to perform byte programming. Refer to AC 
Programming Characteristics and. Waveforms for 
specific timing parameters. 


A reset command is provided as a means to safely 
abort the erase- or program-command sequences. 
Following either set-up command (erase or program) 
with two consecutive writes of FFH will safely abort 
the operation. Memory contents will not be altered. 
A valid command must then be written to place the 
device in the desired state. 


EEPROM cycling failures have always concerned 
users. The high electrical field required by thin oxide 
EEPROMs for tunneling can literally tear apart the 
oxide at defect regions. To combat this, some sup- 
pliers have implemented redundancy schemes, re- 
ducing cycling failures to insignificant levels. Howev- 
er, redundancy requires that cell size be doubled- 
an expensive solution. 


Intel has designed extended cycling capability into 
its ETOX II flash memory technology. Resulting im- 
provements in cycling reliability come without in- 
creasing memory cell size or complexity. First, an 
advanced tunnel oxide increases the charge carry- 
ing ability ten-fold. Second, the oxide area per cell 
subjected to the tunneling electric field is one-tenth 
that of common EEPROMs, minimizingthe probabili- 
ty of oxide defects in the region. Finally, the peak 
electric'field during erasure is approximately 2 MV/ 
cm lower than EEPROM. The lower electric field 


greatly reduces oxide stress and the probability of 
failure-increasing 
time to wearout by a factor of 
100,000,000. 


The 28F512 is capable of 100,000 program/erase 
cycles. The device is programmed and erased using 
Intel's Quick-Pulse Programming and Quick-Erase 
algorithms. Intel's algorithmic approach uses a se- 
ries of operations (pulses), along with byte verifica- 
tion, to completely and reliably erase and program 
the device. 


For further information, see Reliability Report RR-60 
(ETOX-Il Reliability Data Summary). 


The Quick-Pulse Programming algorithm uses pro- 
gramming operations of 10 IJosduration. Each opera- 
tion is followed by a byte verification to determine 
when the addressed byte has been successfully pro- 
grammed. The algorithm allows for up to 25 pro- 
gramming operations per byte, although most bytes 
verify on the first or second operation. The entire 
sequence of programming and byte verification is 
performed with Vpp at high voltage. Figure 4 illus- 
trates the Quick-Pulse Programming algorithm. 


Intel's Quick-Erase algorithm yields fast and reliable 
electrical erasure of memory contents. The algo- 
rithm employs a closed-loop flow, similar to the 
Quick-Pulse Programming algorithm, to 
simulta- 
neously remove charge from all bits in the array. 


Erasure begins with a read of memory contents. The 
28F512 is erased when shipped from the factory. 
Reading FFH data from the device would immedi- 
ately be followed by device programming. 


For devices being erased and reprogrammed, uni- 
form and reliable erasure is ensured by first pro- 
gramming all bits in the device to their charged state 
(Data = OOH). This is accomplished, using the 
Quick-Pulse Programming algorithm, 
in approxi- 


mately one second. 


Erase execution then continues with an initial erase 
operation. Erase verification (data = FFH) begins at 
address OOOOHand continues through the array to 
the last address, or until data other than FFH is en- 
countered. With each erase operation, an increasing 
number of bytes verify to the erased state. Erase 
efficiency may be improved by storing the address of 
the last byte verified in a register. Following the next 
erase operation, verification starts at that stored ad- 
dress location. Erasure typically occurs in one sec- 
ond. Figure 5 illustrates the Quick-Erase algorithm. 


NOTES: 
1. See DC Characteristics 
for value 
of VPPH and VPPL' 


2. Program 
Verify 
is only performed 
after byte program- 
ming. A final read/compare 
may be performed 
(option- 


al) after the register 
is written 
with the Read command. 


Bus 
Command 
Comments 
Operation 


Standby 
Wait for Vpp Ramp to VPPH(1) 


Initialize 
Pulse-Count 


Write 
Set-up 
Data = 40H 
Program 


Write 
Program 
Valid Address/Data 


Standby 
Duration 
of Program 


Operation 
(twHWH1) 


Write 
Program(2) 
Data = COH; Stops Program 


Verify 
Operation(3) 


Standby 
tWHGL 


Read 
Read Byte to Verify 
Programming 


Standby 
Compare 
Data Output to Data 


Expected 


Write 
Read 
Data = OOH. Resets the 
Register 
for Read Operations 


Standby 
Wait for Vpp Ramp to Vppd1) 


3. Refer to principles 
of operation. 
4. CAUTION: 
The 
algorithm 
MUST 
BE FOLLOWED 


to ensure 
proper 
and reliable 
operation 
of the de- 


vice. 


NOTES: 
1. See DC Characteristics 
for value 
of VPPH and VPPL. 


2. Erase 
Verify 
is performed 
only 
after 
chip-erasure. 
A 
final 
read/compare 
may 
be performed 
(optional) 
after 
the register 
is written 
with the read command. 


Bus 
Command 
Comments 
Operation 


Entire memory 
must = OOH 
before 
erasure 


Use Quick-Pulse 
Programming 
Algorithm 
(Figure 4) 


Standby 
Wait for Vpp Ramp to VPPH(1) 


Initialize Addresses 
and 
Pulse-Count 


Write 
Set-up 
Data = 20H 
Erase 


Write 
Erase 
Data = 20H 


Standby 
Duration 
of Erase Operation 
(tWHWH2) 


Write 
Erase(2) 
Addr = Byte to Verify; 


Verify 
Data = AOH; Stops 
Erase 


Operation(3) 


Standby 
tWHGL 


Read 
Read Byte to Verify Erasure 


Standby 
Compare 
Output to FFH 
Increment 
Pulse-Count 


Write 
Read 
Data = OOH. Resets 
the 
Register 
for Read Operations 


Standby 
Wait for Vpp Ramp to VPPL(1) 


3. Refer to principles 
of operation. 


4. CAUTION: 
The 
algorithm 
MUST 
BE 
FOLLOWED 
to 
ensure 
proper 
and 
reliable 
operation 
of 
the 
de- 


vice. 
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Flash-memories 
are often used in larger memory 
ar- 


rays. 
Intel 
provides 
two 
read-control 
inputs 
to ac- 


commodate 
multiple 
memory 
conneCtions. 
Two-line 


control 
provides 
for: 


a. the 
lowest 
possible 
memory 
power 
dissipation 


and, 


b. complete 
assurance 
that 
output 
bus contention 


will not occur. 


To efficiently 
use these 
two 
control 
inputs, 
an ad- 
dress-decoder 
output 
should 
drive 
chip-enable, 
while 
the 
system's 
read 
signal 
controls 
all flash- 
memories 
and other parallel memories. 
This assures 
that only enabled 
memory 
devices 
have active 
out- 
puts, 
while 
deselected 
devices 
maintain 
the 
low 


power 
standby 
condition. 


Flash-memory 
power-switching 
characteristics 
re- 
quire 
careful 
device 
decoupling. 
System 
designers 
are interested 
in three supply current 
(Icel 
issues- 


standby, 
active, 
and 
transient 
current 
peaks 
pro- 
duced by falling and rising edges of chip-enable. 
The 


capacitive 
and inductive 
loads on the device outputs 


determine 
the magnitudes 
of these 
peaks. 


Two-line 
control 
and 
proper 
decoupling 
capacitor 


selection 
will 
suppress 
transient 
voltage 
peaks. 
Each device should have a 0.1 J.LFceramic 
capacitor 


connected 
between 
Vcc and Vss, and between 
Vpp 


and Vss. 


Place 
the 
high-frequency, 
low-inherent-inductance 


capacitors 
as close as possible 
to the devices. 
Also, 
for every eight devices, 
a 4.7 J.LFelectrolytic 
capaci- 


tor 
should 
be placed 
at the 
array's 
power 
supply 


connection, 
between 
Vcc and Vss. The bulk capaci- 


tor will overcome 
voltage 
slumps caused 
by printed- 
circuit-board 
trace 
inductance, 
and 
will 
supply 


charge 
to the smaller 
capacitors 
as needed. 


Vpp Trace on Printed Circuit Boards 


Programming 
flash-memories, 
while 
they 
reside 
in 


the 
target 
system, 
requires 
that 
the 
printed 
circuit 


board designer 
pay attention 
to the Vpp power sup- 


ply trace. The Vpp pin supplies 
the memory 
cell cur- 


rent for programming. 
Use similar 
trace widths 
and 


layout considerations 
given the Vcc 
power bus. Ad- 


equate 
Vpp supply 
traces 
and 
decoupling 
will de- 


crease 
Vpp voltage 
spikes 
and overshoots. 


Power Up/Down 
Protection 


The 28F512 
is designed 
to offer 
protection 
against 


accidental 
erasure 
or 
programming 
during 
power 


transitions. 
Upon power-up, 
the 28F512 
is indifferent 


as to which 
power 
supply, 
Vpp or Vcc, 
powers 
up 


first. Power supply sequencing 
is not required. 
Inter- 


nal circuitry 
in the 
28F512 
ensures 
that 
the 
com- 


mand 
register 
is reset to the read mode 
on power 


up. 


A system 
designer 
must guard against 
active writes 


for Vcc 
voltages 
above 
VLKO when 
Vpp is active. 


Since both WE # and CE # must be low for a com- 
mand 
write, 
driving 
either 
to VIH will inhibit 
writes. 


The control 
register 
architecture 
provides 
an added 
level of protection 
since 
alteration 
of memory 
con- 


tents only occurs 
after successful 
completion 
of the 


two-step 
command 
sequences. 


When 
designing 
portable 
systems, 
designers 
must 


consider 
battery 
power consumption 
not only during 


device 
operation, 
but also for data retention 
during 


system 
idle 
time. 
Flash 
memory 
nonvolatility 
in- 


creases 
the 
usable 
battery 
life of your system 
be- 


cause the 28F512 
does not consume 
any power to 


retain code or data when the system 
is off. Table 4 
illustrates 
the power 
dissipated 
when 
updating 
the 


28F512. 


Table 4. 28F512 Typical 
Update 


Power 
Dlsslpatlon(4) 


Operation 
Notes 
Power Dissipation 
(Watt-Seconds) 


Array Program/ 
1 
0.085 


Program Verify 


Array Erase/ 
2 
0.092 


Erase Verify 


One Complete Cycle 
3 
0.262 


NOTES: 
1. Formula to calculate typical Program/Program Verify 
Power = 
[Vpp x 
/1 Bytes x Typical 
/1 Prog Pulses 
(tWHWHl x 
IpP2 Typical + tWHGL x 
IpP4 Typical» + 


[Vcc x 
/1 Bytes x 
Typical # Prog Pulses (tWHWHl x 


ICC2Typical + tWHGLx ICC4Typical). 
2. Formula to calculate typical Erase/Erase Verify Power 
= [VPP(lpP3Typical x tERASETypical + IpP5Typical x 
tWHGL x 
/1 Bytes» + [Vcc(lCC3 Typical x tERASETypi- 


cal + ICC5Typical x tWHGLx 
/1 Bytes)]. 


3. One Complete Cycle = Array Preprogram + Array 
Erase + Program. 
4. "Typicals" are not guaranteed, but based on a limited 
number of samples from production lots. 


• 


intel~ 


Vpp Supply Voltage 
with 
Respect 
to Ground 
During Erase/Program 
.... 
- 2.0V to + 14.0V(2, 3) 


VCC Supply Voltage 
with 
Respect 
to Ground 
- 2.0V to + 7.0V(2) 


Output Short Circuit Current 
100 mA(4) 


Operating 
Temperature 
During Read 
0·Cto 
+70·C(1) 


During Erase/Program 
O·C to + 70·C(1) 


Operating 
Temperature 
During Read 
-40·Cto 
+ 85·C(2) 


During Erase/Program 
- 40·C to + 85·C(2) 


Temperature 
Under Bias 
-1 O·C to + 80·C(1) 


Temperature 
Under Bias 
- 50·C to + 95·C(2) 


Storage Temperature 
- 65·C to + 125·C 


Voltage 
on Any Pin with 
Respect 
to Ground 
- 2.0V to + 7.0V(2) 


Voltage 
on Pin Ag with 
Respect 
to Ground 
- 2.0V to + 13.5V(2, 3) 


NOTES: 
1. Operating temperature is for commercial product defined by this specification. 
2. Operating temperature is for extended temperature product defined by this specification. 
3. Minimum DC input voltage is -0.5V. 
During transitions, inputs may undershoot to -2.0V 
for periods less than 20 ns. 


Maximum DC voltage on output pins is Vcc + 0.5V, which may overshoot to Vcc + 2.0V for periods less than 20 ns. 
4. Maximum DC voltage on Ag or Vpp may overshoot to + 14.0V for periods less than 20 ns. 
5. Output shorted for no more than one second. No more than one output shorted at a time. 


NOTICE: This is a production data sheet. The specifi- 
cations are subject to change without notice. 


• WARNING: Stressing the device beyond the "Absolute 
Maximum 
Ratings" 
may 
cause 
permanent 
damage. 


These are stress ratings only. Operation 
beyond 
the 
"Operating 
Conditions" 
is not recommended 
and ex- 
tended 
exposure 
beyond 
the 
"Operating 
C6nditions" 


may affect device reliability. 


Symbol 
Parameter 
Limits 
Unit 
Comments 


Mln 
Max 


TA 
,Operating 
Temperature(1) 
0 
70 
·C 
For Read-Only 
and 
Read/Write 
Operations 


for Commercial 
Products 


TA 
Operating 
Temperature(2) 
-40 
+85 
·C 
For Read-Only 
and 
Read/Write 
Operations 


for Extended 
Temperature 
Products 


Vcc 
VCC Supply Voltage 
4.50 
5.50 
V 


Limits 


Symbol 
Parameter 
Notes 
Unit 
Test Conditions 


Mln 
Typ(4) 
Max 


III 
Input Leakage Current 
1 
± 1.0 
/LA 
Vcc = VccMax 
VIN = VccorVss 


ILO 
Output 
Leakage Current 
1 
±10.0 
/LA 
Vcc = VccMax 


VOUT = VCC or VSS 


Ices 
Vcc Standby 
Current 
1 
0.3 
1.0 
mA 
Vcc = VccMax 
CE# 
= VIH 


ICC1 
Vcc Active Read Current 
1 
10 
30 
mA 
Vcc = Vcc Max, CE# 
= VIL 


f = 6 MHz, lOUT = 0 mA 


ICC2 
Vcc Programming 
1,2 
1.0 
10 
mA 
Programming 
in Progress 
Current 


ICC3 
Vcc Erase Current 
1,2 
5.0 
15 
mA 
Erasure in Progress 


ICC4 
Vcc Program Verify 
1,2 
5.0 
15 
mA 
Vpp = VPPH 


Current 
Program Verify in Progress 


intel~ 


DC CHARACTERISTICS-TTL/NMOS 
COMPATIBLE-Commercial 
Products 
(Continued) 


Limits 
Symbol 
Parameter 
Notes 
Unit 
Test Conditions 
Min 
Typ(4) 
Max 


ICC5 
Vcc Erase Verify Current 
1,2 
5.0 
15 
mA 
Vpp = VPPH 
Erase Verify in Progress 


Ipps 
Vpp Leakage Current 
1 
± 10.0 
IJoA Vpp S; Vcc 


IpPl 
Vpp Read Current, Standby 
1 
90 
200 
IJoA Vpp> 
Vcc 
Current, or ID Current 


±10.0 
Vpp S; Vcc 


IpP2 
Vpp Programming Current 
1,2 
8.0 
30 
mA 
Vpp = VPPH 
Programming in Progress 


IpP3 
Vpp Erase Current 
1,2 
4.0 
30 
mA 
Vpp = VPPH 
Erasure in Progress 


IpP4 
Vpp Program Verify Current 
1,2 
2.0 
5.0 
mA 
Vpp = VPPH 
Program Verify in Progress 


IpP5 
Vpp Erase Verify Current 
1,2 
2.0 
5.0 
mA 
Vpp = VPPH 
Erase Verify in Progress 


VIL 
Input Low Voltage 
-0.5 
0.8 
V 


VIH 
Input High Voltage 
2.0 
Vcc + 0.5 
V 


VOL 
Output Low Voltage 
0.45 
V 
IOL = 5.8mA 
Vcc = VccMin 


VOHl 
O\ltput High Voltage 
2.4 
V 
IOH = -2.5 
mA 


Vcc = VccMin 


VIO 
Ag Intelligent Identifier Voltage 
11.50 
13.00 
V 


110 
Ag Intelligent Identifier Current 
1,2 
90 
200 
IJoA Ag = VIO 


VPPL 
Vpp during Read-Only 
0.00 
6.5 
V 
NOTE: Erase/Program 
are 
Operations 
Inhibited when VPP = VpPL 


VPPH 
VPPduring Read/Write 
11.40 
12.60 
V 
Operations 


VLKO 
Vcc Erase/Write 
Lock Voltage 
2.5 
V 


Limits 
Symbol 
Parameter 
Notes 
Unit 
Test Conditions 
Min 
Typ(4) 
Max 


III 
Input Leakage Current 
1 
±1.0 
IJoA 
Vcc = VccMax 
VIN = Vcc or Vss 


ILO 
Output Leakage Current 
1 
±10.0 
IJoA 
Vcc = VccMax 
VOUT = Vcc or Vss 


Ices 
Vcc Standby Current 
1 
50 
100 
IJoA 
Vcc = VccMax 
CE# = Vcc ±0.2V 


ICCl 
Vcc Active Read Current 
1 
10 
30 
mA 
Vcc = Vcc Max, CE# = VIL 
f = 6 MHz, lOUT = 0 mA 


• 


Limits 
Symbol 
Parameter 
Notes 
Unit 
Test Conditions 
Min 
Typ(4) 
Max 


ICC2 
VCC Programming 
1,2 
1.0 
10 
mA 
Programming in Progress 
Current 


ICC3 
Vcc Erase Current 
1,2 
5.0 
15 
mA 
Erasure in Progress 


ICC4 
Vcc Program Verify 
1,2 
5.0 
15 
mA 
Vpp = VPPH 
Current 
Program Verify in Progress 


ICC5 
Vcc Erase Verify Current 
1,2 
5.0 
15 
mA 
Vpp = VPPH 
Erase Verify in Progress 


IpPS 
Vpp Leakage Current 
1 
±10.0 
IJoA 
Vpp"; 
Vcc 


IpP1 
Vpp Read Current, ID 
1 
90 
200 
IJoA 
Vpp> 
Vcc 
Current, or Standby 
±10.0 
Vpp"; 
Vcc 
Current 


IpP2 
Vpp Programming 
1,2 
8.0 
30 
mA 
Vpp = VPPH 
Current 
Programming in Progress 


IpP3 
Vpp Erase Current 
1,2 
4.0 
30 
mA 
Vpp = VPPH 
Erasure in Progress 


IpP4 
Vpp Program Verify 
1,2 
2.0 
5.0 
mA 
Vpp = VPPH 
Current 
Program Verify in Progress 


IpP5 
Vpp Erase Verify Current 
1,2 
2.0 
5.0 
mA 
Vpp = VPPH 
Erase Verify in Progress 


Vil 
Input Low Voltage 
-0.5 
0.8 
V 


VIH 
Input High Voltage 
0.7 Vcc 
Vcc + 0.5 
V 


VOL 
Output Low Voltage 
0.45 
V 
tOl = 5.8mA 
VCC = VCCMin 


VOH1 
Output High Voltage 
0.85 Vcc 
V 
IOH = - 2.5 mA, 
Vcc = VccMin 


VOH2 
Vcc - 
0.4 
IOH = -100 
IJoA, 


Vcc = VCCMin 


VIO 
Ag Intelligent Identifier 
11.50 
13.00 
V 
Ag = VIO 
Voltage 


110 
Ag Intelligent Identifier 
1,2 
90 
200 
IJoA 
Ag = VIO 
Current 


VPPl 
Vpp during Read-Only 
0.00 
6.5 
V 
NOTE: Erase/Program 
Operations 
are Inhibited when 
Vpp = VPPl 


VpPH 
Vpp during Read/Write 
11.40 
12.60 
V 
Operations 


VlKO 
Vcc Erase/Write 
Lock 
2.5 
V 
Voltage 


DC CHARACTERISTICS-TTL/NMOS 
COMPATIBLE-Extended 
Temperature 
Products 


limits 


Symbol 
Parameter 
Notes 
Unit 
Test Conditions 


Min 
Typ(4) 
Max 


III 
Input Leakage Current 
1 
±1.0 
JJoA Vcc = VccMax 


VIN = VCC or VSS 


ILO 
Output 
Leakage Current 
1 
±10.0 
JJoA VCC = VCCMax 


VOUT = VCC or VSS 


Iccs 
Vcc Standby Current 
1 
0.3 
1.0 
mA 
Vcc = VccMax 
CE# = VIH 


ICC1 
Vcc Active Read Current 
1 
10 
30 
mA 
Vcc = Vcc Max, CE# 
= Vil 


f = 6 MHz, lOUT = 0 mA 


ICC2 
Vcc Programming 
Current 
1,2 
1.0 
30 
mA 
Programming 
in Progress 


ICC3 
Vcc Erase Current 
1,2 
5.0 
30 
mA 
Erasure in Progress 


ICC4 
Vcc Program Verify Current 
1,2 
5.0 
30 
mA 
Vpp = VPPH 
Program Verify in Progress 


ICC5 
Vcc Erase Verify Current 
1,2 
5.0 
30 
mA 
Vpp = VPPH 
Erase Verify in Progress 


Ipps 
Vpp Leakage Current 
1 
±10.0 
JJoA Vpp:5: Vcc 


IpP1 
Vpp Read Current, Standby 
1 
90 
200 
JJoA Vpp> 
Vcc 


Current, or 10 Current 
±10.0 
Vpp:5: Vcc 


IpP2 
Vpp Programming 
Current 
1,2 
8.0 
30 
mA 
Vpp = VPPH 
Programming 
in Progress 


IpP3 
Vpp Erase Current 
1,2 
4.0 
30 
mA 
Vpp = VPPH 
Erasure in Progress 


IpP4 
Vpp Program Verify Current 
1,2 
2.0 
5.0 
mA 
Vpp = VPPH 
Program Verify in Progress 


IpP5 
Vpp Erase Verify Current 
1,2 
2.0 
5.0 
mA 
Vpp = VPPH 
Erase Verify in Progress 


Vil 
Input Low Voltage 
-0.5 
0.8 
V 


VIH 
Input High Voltage 
2.0 
Vcc + 0.5 
V 


VOL 
Output 
Low Voltage 
0.45 
V 
IOl = 5.8mA 


Vcc = VccMin 


VOH1 
Output High Voltage 
2.4 
V 
IOH = -2.5 
mA 


Vcc = VccMin 


VIO 
Ag Intelligent 
Identifier Voltage 
11.50 
13.00 
V 


lID 
Ag Intelligent 
Identifier 
Current 
1,2 
90 
500 
JJoA Ag = VIO 


VPPl 
Vpp during Read-Only 
0.00 
6.5 
V 
NOTE: Erase/Program 
are 
Operations 
Inhibited when Vpp = VPPl 


VPPH 
Vpp during Read/Write 
11.40 
12.60 
V 


Operations 


VlKO 
Vcc Erase/Write 
Lock Voltage 
2.5 
V 


• 


DC CHARACTERISTICS-CMOS 
COMPATIBLE-Extended 
Temperature 


Products 


Symbol 
Limits 
Parameter 
Notes 
Unit 
Test Conditions 


Min 
Typ(4) 
Max 


III 
Input Leakage Current 
1 
±1.0 
p.A 
Vcc = VccMax 
VIN = Vcc or VSS 


ILO 
Output Leakage Current 
1 
±10.0 
p.A 
Vcc = VccMax 
VOUT = VCCor VSS 


Iccs 
Vcc Standby Current 
1 
50 
100 
p.A 
Vcc = VccMax 
CE# = Vcc ±0.2V 


ICC1 
Vcc Active Read Current 
1 
10 
50 
mA 
Vcc = Vcc Max, CE# 
= VIL 


f = 6 MHz, lOUT = 0 mA 


ICC2 
Vcc Programming Current 
1,2 
1.0 
10 
mA 
Programming in Progress 


ICC3 
Vcc Erase Current 
1,2 
5.0 
15 
mA 
Erasure in Progress 


ICC4 
Vcc Program Verify 
1,2 
5.0 
30 
mA 
VPP = VPPH 


Current 
Program Verify in Progress 


ICC5 
Vcc Erase Verify Current 
1; 2 
5.0 
30 
mA 
VPP = VPPH 
Erase Verify in Progress 


Ipps 
VPP Leakage Current 
1 
±10.0 
p.A 
Vpp"; 
Vcc 


IpP1 
VPP Read Current, ID 
1 
90 
200 
p.A 
Vpp> 
VCC 


Current, or Standby 
± 10.0 
Vpp"; 
VCC 
Current 


IpP2 
VPP Programming Current 
1,2 
8.0 
30 
mA 
VPP = VPPH 
Programming in Progress 


IpP3 
VPP Erase Current 
1,2 
4.0 
30 
mA 
VPP = VPPH 
Erasure in Progress 


IpP4 
VPP Program Verify 
1,2 
2.0 
5.0 
mA 
VPP = VPPH 
Current 
Program Verify in Progress 


IpP5 
VPP Erase Verify Current 
1,2 
2.0 
5.0 
mA 
VPP = VPPH 
Erase Verify in Progress 


VIL 
Input Low Voltage 
-0.5 
0.8 
V 


VIH 
Input High Voltage 
0.7 Vcc 
Vcc + 0.5 
V 


VOL 
Output Low Voltage 
0.45 
V 
IOL = 5.8 mA 


Vcc = VccMin 


DC CHARACTERISTICS-CMOS 
COMPATIBLE-Extended 
Temperature 


Products (Continued) 


Limits 


Symbol 
Parameter 
Notes 
Unit 
Test Conditions 


Min 
Typ(4) 
Max 


VOH1 
Output High Voltage 
0.85 Vcc 
V 
IOH = - 2.5 mA, 


Vcc = VccMin 


VOH2 
Vcc - 
0.4 
IOH = -100 
",A, 
Vcc = VccMin 


VIO 
Ag Intelligent Identifier Voltage 
11.50 
13.00 
V 
Ag = VIO 


110 
Ag Intelligent Identifier Current 
1,2 
90 
500 
",A 
Ag = VIO 


VPPL 
Vpp during Read-Only Operations 
0.00 
6.5 
V 
NOTE: Erase/ 
Program 
are Inhibited 
when 
Vpp = VPPL 


VPPH 
Vpp during Read/Write 
Operations 
11.40 
12.60 
V 


VLKO 
VCC Erase/Write 
Lock Voltage 
2.5 
V 


Limits 


Symbol 
Parameter 
Notes 
Unit 
Conditions 


Mln 
Max 


CIN 
Address/Control 
Capacitance 
3 
8 
pF 
VIN = OV 


COUT 
Output Capacitance 
3 
12 
pF 
VOUT = OV 


NOTES: 
1. All currents are in RMS unless otherwise noted. Typical values at Vcc = S.OV,Vpp 
12.0V, T = 
+2S"C. These 
currents are valid for all product versions (packages and speeds). 
2. Not 100% tested: characterization data available. 
3. Sampled, not 100% tested. 
4. "Typicals" are not guaranteed, but based on a limited number of samples from production lots. 
• 


2.4 


INPUT 


0.45 
~:~ 
> TEST POINTS 
I 
CL=100pF 


AC Testing: Inputs are driven a12.4V for a logic "I" and 0.45V for 
a logic "0". Testing measurements are made at2.0V for a logic 
"I" and O.BVfor a logic "0". Rise/Falitime 
,; 10 ns. 


Input Rise and Fall Times (10% to 90%) 
10 ns 


Input Pulse Levels 
0.45V and 2.4V 


Input Timing Reference 
Level 
0.8V and 2.0V 


Output Timing Reference 
Level 
0.8V and 2.0V 


N28F512·120 


Versions(1) 
TN28F512-120 
N28F512-150 


Notes 
P28F512·120 
P28F512-150 
Unit 
TP28F512·120 


Symbol 
Characteristic 
Mln 
Max 
Mln 
Max 


tAVAy/tRC 
Read Cycle Time 
120 
150 
ns 


tELQy/teE 
Chip Enable Access Time 
120 
150 
ns 


tAYQy/tACC 
Address 
Access Time 
120 
150 
ns 


tGLQy/tOE 
Output Enable Access Time 
50 
55 
ns 


tELQX/tLZ 
Chip Enable to Output in Low Z 
2,3 
0 
0 
ns 


tEHQZ 
Chip Disable to Output in High Z 
2 
55 
55 
ns 


tGLQX/tOLZ 
Output Enable to Output in Low Z 
2,3 
0 
0 
ns 


tGHQZ/tDF 
Output Disable to Output in High Z 
2 
30 
35 
ns 


toH 
Output Hold from Address, 
CE # , or 
2,4 
0 
0 
ns 
OE# 
Change 


tWHGL 
Write Recovery 
Time before Read 
6 
6 
JLs 


NOTES: 
1. Model number prefixes: N = PLCC, P = PDIP, T = Extended Temperature. 
2. Sampled, not 100% tested. 
3. Guaranteed by design. 
4. Whichever occurs first. 


'cLOY (toE) 


~LOV 
(leE) 


'cLOX 
(toll) 
--l 


hox 
('ezl 


_.c( 


intelGP 


Versions 
28F512·120 
28F512·150 


Notes 
Unit 
Symbol 
Characteristic 
Min 
Max 
Min 
Max 


tAVAV/twc 
Write Cycle Time 
120 
150 
ns 


tAVWl/tAS 
Address 
Set-Up Time 
0 
0 
ns 


tWLAX/tAH 
Address 
Hold Time 
60 
60 
ns 


tDVWH/tDS 
Data Set-up Time 
50 
50 
ns 


tWHDX/tDH 
Data Hold Time 
10 
10 
ns 


tWHGl 
Write Recovery 
Time before Read 
6 
6 
IJ-s 


tGHWl 
Read Recovery 
Time before Write 
2 
0 
0 
IJ-s 


tElwl/tcs 
Chip Enable Set-Up Time before Write 
20 
20 
ns 


tWHEH/tCH 
Chip Enable Hold Time 
0 
0 
ns 


tWlWH/twp 
Write Pulse Width 
60 
60 
ns 


tWHWl/twPH 
Write Pulse Width High 
20 
20 
ns 


tWHWH1 
Duration of Programming 
Operation 
3 
10 
10 
IJ-s 


tWHWH2 
Duration of Erase Operation 
3 
9.5 
9.5 
ms 


tVPEl 
Vpp Set-Up Time to Chip Enable Low 
2 
1.0 
1.0 
IJ-s 


NOTES: 
1. Read timing characteristics during read/write operations are the same as during read-only operations. Refer to AC Char- 
acteristics for Read-Only Operations. 
2. Guaranteed by design. 
3. The integrated stop timer terminates the programming/erase operations, thereby eliminating the need for a maximum 
specification. 
4. Erase/Program cycles on extended temperature products is 1,000 cycles. 


Limits 


Parameter 
Notes 
N/P28F512·120,150 
TN/TP28F512·120(6) 
Unit 


Mln 
Typ 
Max 
Mln 
Typ 
Max 


Chip Erase 
1,3,4 
1 
10 
1 
10 
Sec 
Time 


Chip Program 
1,2,4 
1 
6.25 
1 
6.25 
Sec 
Time 


NOTES: 
1. "Typicals" are not guaranteed, but based on a limited number of samples from production lots. Data taker] at 25'C, 12.0V 
Vpp at 0 cycles. 
2. Minimum by1e programming time excluding system overhead is 16 p.s (10 P.s program + 6 P.s write recovery), while 
maximum is 400 p.s/by1e (16 P.s x 25 loops allowed by algorithm). Max chip programming time is specified lower than the 
worst case allowed by the programming algorithm since most by1esprogram significantly faster than the worst case by1e. 
3. Excludes OOHProgramming Prior to Erasure. 
4. Excludes System-level Overhead. 
5. Refer to RR-60 "ETOX II Flash Memory Reliability Data Summary" for typical cycling data and failure rate calculations. 
6. Extended temperature products 
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Versions 
28F512-120 
28F512-150 


Notes 
Unit 
Symbol 
Characteristic 
Mln 
Max 
Min 
Max 


tAVAV 
Write Cycle 
120 
150 
ns 


Time 


tAVEL 
Address 
Set- 
0 
0 
ns 
UpTime 


tELAX 
Address 
Hold 
80 
80 
ns 
Time 


tDVEH 
Data Set-Up 
50 
50 
ns 
Time 


tEHDX 
Data Hold 
10 
10 
ns 


Time 


tEHGL 
Write 
6 
6 
,..,s 
Recovery 
Time 
before Read 


lGHEL 
Read 
2 
0 
0 
,..,s 
Recovery 
Time 
before Write 


tWLEL 
Write Enable 
0 
0 
ns 
Set-Up Time 
before Chip 
Enable 


tEHWH 
Write Enable 
0 
0 
ns 
Hold Time 


tELEH 
Write Pulse 
1 
70 
70 
ns 
Width 


tEHEL 
Write Pulse 
20 
20 
ns 
Width High 


tVPEL 
Vpp Set-Up 
2 
1.0 
1.0 
,..,s 
Time to Chip 
Enable Low 


NOTE: 
1. Chip-Enable Controlled Writes: Write operations are driven by the valid combination of Chip-Enable and Write-Enable. In 
systems where Chip-Enable defines the write pulse width (within a longer Write-Enable timing waveform) all set-up, hold and 
inactive Write-Enable times should be measured relative to the Chip-Enable waveform. 
2. Guaranteed by design. 


I 


--c( 


5.0V 


VCC 


OV 


IVPEl 


12.0V 


Vpp 


VpPl 


ITlpI21sIFI51 
d21-1112101 
I 


lpACKAGE 
L----ACCESS 
SPEED (ns) 
P = 32-PIN 
PLASTICDIP 
120 ns 
N= 32-lEAD 
PlCC 
150 ns 


TEIolPERATURE 
T= EXTENDED(-40°C 
TO +S50C) 
BLANK= COlollolERCIAl(OOC TO +700C) 


P28F512-120 


P28F512-150 


N28F512-120 


N28F512-150 


TP28F512-120 


TN28F512-120 


ER-20, "ETOX 
II Flash Memory Technology" 


ER-24, "lnt~1 Flash Memory" 


RR-60, "ETOX 
II Flash Memory 
Reliability 
Data Summary" 


AP-316, 
"Using 
Flash Memory for In-System 
Reprogrammable 


Nonvolatile 
Storage" 


AP-325 "Guide 
to Flash Memory 
Reprogramming" 


294005 


294008 


293002 


292046 


Number 
Description 


006 
Removed 
200 ns speed bin 
Revised Erase Maximum 
Pulse Count for Figure 5 from 3000 to 1000 


Clarified AC and DC test conditions 


007 
Corrected 
AC Waveforms 
Added Extended 
Temperature 
devices; TP28F512-120, 
TN28F512-120 


008 
Revised symbols; 
Le., CE, OE, etc. to CE IF, OE IF, etc. 
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28F256A 
256K (32K x 8) CMOS FLASH MEMORY 
• Flash Electrical 
Chip-Erase 
• Command 
Register 
Architecture 
for 
- 
1 Second 
Typical 
Chip-Erase 
Microprocessor 
/Mlcrocontroller 
• Quick-Pulse 
Programming 
Algorithm 
Compatible 
Write 
Interface 


- 
10 J-ts Typical 
Byte-Program 
• Noise Immunity 
Features 
- 
0.5 Second 
Chip-Program 
- 
± 10% Vcc Tolerance 
• 100,000 Erase/Program 
Cycles 
- 
Maximum 
Latch-Up 
Immunity 
through 
EPI Processing 
• 12.0V ±5% Vpp 
ETOX II Flash Nonvolatile 
Technology 
• 
• High-Performance 
Read 
- 
EPROM-Compatible 
Process 
Base 
- 
120 ns Maximum 
Access Time 
- 
High-Volume 
Manufacturing 
• CMOS Low Power Consumption 
Experience 
- 
10 mA Typical 
Active Current 
• JEDEC-Standard 
Pinouts 
- 
50 J-tATypical 
Standby 
Current 
- 
32-Pin PDIP 
- 
OW Data Retention 
Power 
- 
32-Lead 
PLCC 
• Integrated 
Program/Erase 
Stop Timer 
(See 
Packaging 
Spec., 
Order 
#231369) 


Intel's 
28F256A 
CMOS 
flash 
memory 
offers 
the 
most 
cost-effective 
and reliable 
alternative 
for read/write 
random 
access 
nonvolatile 
memory. The 28F256A 
adds electrical 
chip-erasure 
and reprogramming 
to familiar 
EPROM technology. 
Memory 
contents 
can be rewritten: 
in a test socket; 
in a PROM-programmer 
socket; 
on- 
board during subassembly 
test; in-system 
during final test; and in-system 
after-sale. 
The 28F256A 
increases 
memory 
flexibility, 
while contributing 
to time and cost savings. 


The 
28F256A 
is a 256-kilobit 
nonvolatile 
memory 
organized 
as 32,768 
bytes 
of 8 bits. 
Intel's 
28F256A 
is 
offered 
in 32-pin plastic 
dip and 32-lead 
PLCC. Pin assignments 
conform 
to JEDEC 
standards. 


Extended 
erase and program 
cycling 
capability 
is designed 
into Intel's 
ETOX II (EPROM 
Tunnel 
Oxide) 
pro- 


cess technology. 
Advanced 
oxide processing, 
an optimized 
tunneling 
structure, 
and lower electric 
field com- 
bine to extend 
reliable 
cycling 
beyond 
that of traditional 
EEPROMs. 
With the 12.0V Vpp supply, the 28F256A 
performs 
a minimum 
of 10,000 erase and program 
cycles 
well within 
the time limits of the Quick-Pulse 
Pro- 
gramming 
and Quick-Erase 
algorithms. 


Intel's 
28F256A 
employs 
advanced 
CMOS 
circuitry 
for systems 
requiring 
high-performance 
access 
speeds, . 


low power consumption, 
and immunity 
to noise. Its 120 ns access 
time provides 
no-WAlT-state 
performance 
for a wide range 
of microprocessors 
and microcontrollers. 
Typical 
standby 
current 
of 50 JJ.Atranslates 
into 
power 
savings 
when the device 
is deselected. 
Finally; the highest 
degree 
of latch-up 
protection 
is achieved 
through 
Intel's unique EPI processing. 
Prevention 
of latch-up 
is provided 
for stresses 
up to 100 mA on address 
and data pins, from 
-1V 
to VCC + 1V. 


With Intel's ETOX II process 
base, the 28F256A 
levers years of EPROM experience 
to yield the highest 
levels 
of quality, 
reliability, 
and cost-effectiveness. 
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Symbol 
Type 
Name and Function 


Ao-A14 
INPUT 
ADDRESS 
INPUTS for memory addresses. 
Addresses 
are internally 
latched during a write cycle. 


DOo-DO? 
INPUT/ 
DATA INPUT/OUTPUT: 
Inputs data during memory write cycles; outputs 
OUTPUT 
data during memory read cycles. The data pins are active high and float to 
tri-state 
OFF when the chip is deselected 
or the outputs are disabled. 
Data 
is internally 
latched during a write cycle. 


CE# 
INPUT 
CHIP ENABLE activates 
the device's 
control 
logic, input buffers, 


decoders, 
and sense amplifiers. 
CE # is active low; CE # high deselects 
the memory device and reduces power consumption 
to standby 
levels. 


OE# 
INPUT 
OUTPUT 
ENABLE gates the devices output through 
the data buffers 
during a read cycle. OE # is active low. 


WE# 
INPUT 
WRITE 
ENABLE controls 
writes to the control 
register and the array. Write 
enable is active low. Addresses 
are latched on the falling edge and data is 
latched on the rising edge of the WE# 
pulse. Note: With Vpp S; 6.5V, 
memory contents 
cannot 
be altered. 


Vpp 
ERASE/PROGRAM 
POWER SUPPLY for writing the command 
register, 
erasing the entire array, or programming 
bytes in the array. 


Vcc 
DEVICE 
POWER SUPPLY (5V ± 10%). 


Vss 
GROUND. 


NC 
NO INTERNAL 
CONNECTION 
to device. Pin may be driven or left floating. 


The 
28F256A 
flash 
memory 
provides 
nonvolatility 
along 
with 
the 
capability 
to perform 
over 100,000 
electrical 
chip-erasure/reprogram 
cycles. These fea- 
tures make the 28F256A 
an innovative 
alternative 
to 
disk, 
EEPROM, 
and 
battery-backed 
static 
RAM. 
Where periodic 
updates 
of code and data-tables 
are 
required, 
the 28F256A's 
reprogrammability 
and non- 
volatility 
make it the obvious 
and ideal replacement 
for EPROM. 


Primary 
applications 
and operating 
systems 
stored 
in flash eliminate 
the slow disk-DRAM 
download 
pro- 
cess. This results in a dramatic 
enhancement 
of per- 
formance 
and 
substantial 
reduction 
of power 
con- 
sumption-considerations 
particularly 
important 
in 
portable 
equipment. 
Flash 
memory 
increases 
flexi- 
bility with electrical 
chip-erasure 
and in-system 
up- 
date capability 
of operating 
systems 
and application 
code. 
With 
updatable 
BIOS, system 
manufacturers 
can easily accommodate 
last-minute 
changes 
as re- 
visions 
are made. 


In diskless 
workstations 
and terminals, 
network 
traf- 
fic reduces 
to a minimum 
and systems 
become 
in- 
stant-on. 
Re!iability 
exceeds 
that of electromechani- 


cal media. Often in these environments, 
power inter- 


rupts 
force 
extended 
re-boot 
periods 
for 
all 
net- 
worked 
terminals. 
This mishap is no longer an issue 
if boot 
code, 
operating 
systems, 
communications 
protocols 
and primary applications 
are flash-resident 


in each terminal. 


For embedded 
systems 
that rely on dynamic 
RAM/ 
disk for main system 
memory 
or nonvolatile 
backup 
storage, 
the 28F256A 
provides 
higher performance, 


lower power consumption, 
instant-on 
capability, 
and 
allows 
an "execute 
in place" 
memory 
hierarchy 
for 


code and data table 
reading. 
Additionally, 
the flash 
memory 
is more 
rugged 
and reliable 
in harsh 
envi- 
ronments 
where 
extreme 
temperatures 
and 
shock 
can cause disk-based 
systems 
to fail. 


The need for code updates 
pervades 
all phases of a 
system's 
life-from 
prototyping 
to system 
manufac- 
turing 
to after-sale 
service. 
The electrical 
chip-era- 
sure and reprogramming 
ability 
of the 28F256A 
al- 


lows 
in-circuit 
alterability; 
this 
eliminates 
unneces- 


sary 
handling 
and 
less-reliable 
socketed 
connec- 
tions, 
while 
adding 
greater 
test, 
manufacture, 
and 
update 
flexibility. 


Material 
and 
labor 
costs 
associated 
with 
code 
changes 
increases 
at higher 
levels 
of system 
inte- 
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gration-the 
most costly being code updates after 
sale. Code "bugs", or the desire to augment system 
functionality, prompt after-sale code updates. Field 
revision to EPROM-based code requires the remov- 
al of EPROM components or entire boards. With the 
28F256A, code updates are implemented locally via 
an edge-connector, or remotely over a communica- 
tions link. 


For systems currently using a high-density static 
RAM/battery 
configuration for data accumulation, 
flash memory's inherent nonvolatility eliminates the 
need for battery backup. The concern for battery 
failure no longer exists, an important consideration 
for portable equipment and medical instruments, 
both requiring continuous performance. In addition, 
flash memory offers a considerable cost advantage 
over static RAM. 


Flash memory's electrical chip-erasure, byte pro- 
grammability and complete nonvolatility fit well with 
data accumulation and recording needs. Electrical 


chip-erasure gives the designer a "blank slate" in 
which to log or record data. Data can be periodically 
off-loaded for analysis and the flash memory erased 
producing a new "blank slate". 


A high degree of on-chip feature integration simpli- 
fies memory-to-processor interfacing. Figure 3 de- 
picts two 28F256As tied to the 80C186 system bus. 
The 28F256A's architecture minimizes interface cir- 
cuitry needed for complete in-circuit updates of 
memory contents. 


With cost-effective in-system reprogramming, ex- 
tended cycling capability, and true nonvolatility, the 
28F256A is a functional superset of one or more of 
the 
alternatives: 
EPROMs, 
EEPROMs, 
battery 


backed static RAM, or disk. EPROM-compatible 
read specifications, straightforward interfacing, and 
in-circuit alterability offer designers unlimited flexibili- 
ty to meet the high standards of today's designs. 
• 


Flash memory augments EPROM functionality with 
in-circuit electrical erasure and reprogramming. The 
28F256A introduces a command register to manage 
this new functionality. The command register allows 
for: 100% TTL-Ievel control inputs; fixed power sup- 
ply during erasure and programming; and maximum 
EPROM compatibility. 


In the absence of high voltage on the Vpp pin, the 
28F256A is a read-only memory. Manipulation of the 
external memory-control pins yields the standard 
EPROM read, standby, output disable, and Intelli- 
gent Identifier operations. 


The same EPROM read, standby, and output disable 
operations are available when high voltage is ap- 
plied to the Vpp pin. In addition, high voltage on Vpp 
enables erasure and programming of the device. All 
functions 
associated with altering memory con- 
tents-Intelligent 
Identifier, erase, erase verify, pro- 
gram, and program verify-are 
accessed via the 
command register. 


Commands are written to the register using standard 
microprocessor 
write timings. 
Register contents 
serve as input to an internal state-machine which 
control the erase and programming circuitry. Write 
cycles also internally latch addresses and data 
needed for programming and erase operations. With 
the appropriate command written to the register, 
standard microprocessor read timings output array 
data, access the Intelligent Identifier codes, or out- 
put data for erase and program verification. 


Successive command write cycles define the dura- 
tion of program and erase operations; specifically, 
the program or erase time durations are normally 
terminated by associated program or erase verify 
commands. An integrated stop timer provides simpli- 
fied timing control over these operations; thus elimi- 
nating the need for maximum program/erase timing 
specifications. Programming and erase pulse dura- 
tions are minimums only. When the stop timer termi- 
nates a program or erase operation, the device en- 
ters an inactive state and remains inactive until re- 
ceiving the appropriate verify or reset command. 


The command register is only active when Vpp is at 
high voltage. Depending upon the application, the 
system designer may choose to make the Vpp pow- 
er supply switchable-available 
only when memory 
updates are desired. When Vpp = VPPL, the con- 
tents of the register default to the read command, 
making the 28F256A a read-only memory. In this 
mode, the memory contents cannot be altered. 


Or, the system designer may choose to "hardwire" 
Vpp, 
making the high voltage supply constantly 
available. In this case, all Command Register func- 
tions are inhibited whenever Vcc is below the write 
lockout voltage VLKO' (See Power Up/Down Protec- 
tion). The 28F256A is designed to accommodate ei- 
ther design practice, and to encourage optimization 
of the processor-memory interface. 


The two-step program/erase write sequence to the 
Command Register provides additional software 
write protection. 


The 28F256A has two control functions, both of 
which must be logically active, to obtain data at the 
outputs. Chip-Enable (CE"") is the power control and 
should be used for device selection. Output-Enable 
(OE"") is the output control and should be used to 
gate data from the output pins, independent of de- 
vice selection. Refer to AC read timing waveforms. 


When Vpp is high (VPPH), the read operations can 
be used to access array data, to output the Intelli- 
gent Identifier codes, and to access data for pro- 
gram/erase verification. When Vpp is low (VppJ, 
the 
read operation can access only the array data. 


Output Disable 


With Output-Enable at a logic-high level (VIH),output 
from the device is disabled. Output pins are placed 
in a high-impedance state. 


With Chip-Enable at a logic-high level, the standby 
operation disables most of the 28F256A's circuitry 
and substantially reduces device power consump- 
tion. The outputs are placed in a high-impedance 


state, 
independent 
of the 
Output-Enable 
signal. 
If 
the 28F256A 
is deselected 
during erasure, 
program- 
ming, 
or 
program/erase 
verification, 
the 
device 
draws 
active 
current 
until the operation 
is terminat- 
ed. 


Intelligent 
Identifier 
Operation 


The Intelligent 
Identifier 
operation 
outputs 
the manu- 
facturer 
code 
(89H) 
and 
device 
code 
(89H). 
Pro- 
gramming 
equipment 
automatically 
matches 
the de- 
vice 
with 
its proper 
erase 
and 
programming 
algo- 
rithms. 
With 
Chip-Enable 
and 
Output-Enable 
at a 
logic 
low level, 
rising 
Aa to high voltage 
VID 
(see 
D.C. Characteristics) 
activates 
the 
operation. 
Data 
read from locations 
OOOOHand 0001 H represent 
the 
manufacturer's 
code 
and the device 
code, 
respec- 
tively. 


The 
manufacturer- 
and 
device-codes 
can 
also 
be 
read via the command 
register, 
for instances 
where 
the 28F256A 
is erased and reprogrammed 
in the tar- 


get system. 
Following 
a write 
of 90H to the 
com- 
mand register, 
a read from address 
location 
OOOOH 
outputs 
the manufacturer 
code 
(89H). A read from 
address 
0001 H outputs 
the device 
code (89H). 


Device 
erasure 
and programming 
are accomplished 
via the command 
register, 
when 
high voltage 
is ap- 


plied 
to the 
Vpp 
pin. The 
contents 
of the 
register 


serve 
as input 
to the 
internal 
state-machine. 
The 


state-machine 
outputs 
dictate the function 
of the de- 


vice. 


The command 
register 
itself does not occupy 
an ad- 


dressable 
memory 
location. 
The register 
is a latch 


used to store the command, 
along with address 
and 


data information 
needed 
to execute 
the command. 


The command 
register 
is written 
by bringing 
Write- 


Enable to a logic-low 
level (VIU, while Chip-Enable 
is 


low. Addresses 
are latched 
on the falling 
edge 
of 


Write-Enable, 
while 
data 
is latched 
on 
the 
rising 
edge of the Write-Enable 
pulse. Standard 
microproc- 


essor write timings 
are used. 
. 


Refer 
to AC Write 
Characteristics 
and 
the 
Erase/ 


Programming 
Waveforms 
for specific 
timing parame- 
ters. 


When low voltage 
is applied to the Vpp 
pin, the con- 


tents 
of the command 
register 
default 
to OOH, en- 


abling read-only 
operations. 


Placing 
high voltage 
on the 
Vpp 
pin enables 
read/ 


write operations. 
Device operations 
are selected 
by 


writing specific 
data patterns 
into the command 
reg- 


ister. Table 3 defines 
these 
28F256A 
register 
com- 


mands. 


Pins 
Vpp(1) 
Ao 
Ag 
CE# 
OE# 
WE# 
DQO-DQ7 
Operation 


Read 
VPPL 
Ao 
Ag 
VIL 
VIL 
VIH 
Data Out 
> 
oJ 
Output Disable 
VPPL 
X(7) 
X 
VIL 
VIH 
VIH 
Tri-State 
z 
~ 
Standby 
VPPL 
X 
X 
VIH 
X 
X 
Tri-State 


CC 
Intelligent 
10 Manufacturer(2) 
VPPL 
VIL 
VID(3) 
VIL 
VIL 
VIH 
Data = 89H 
wa: 
Intelligent 
10 Device(2) 
VPPL 
VIH 
VID(3) 
VIL 
VIL 
VIH 
Data = 89H 


Read 
VPPH 
Ao 
Ag 
VIL 
VIL 
VIH 
Data Out(4) 


.•...• 


Output Disable 
VPPH 
X 
X 
VIL 
VIH 
VIH 
Tri-State 
Ow 
CCI- 
w- 
Standby(5) 
VPPH 
X 
X 
VIH 
X 
X 
Tri-State 
a: a:~ 
Write 
VPPH 
Ao 
Ag 
VIL 
VIH 
VIL 
Data In (6) 


NOTES: 
1. Refer to DC Characteristics. 
When 
Vpp = VPPL memory 
contents 
can be read but not written 
or erased. 


2. Manufacturer 
and device 
codes 
may also be accessed 
via a command 
register 
write 
sequence. 


Refer to Table 
3. All other 
addresses 
low. 
3. VIO is the Intelligent 
Identifier 
high voltage. 
Refer to D.C. Characteristics. 


4. Read operations 
with Vpp = VPPH may access 
array data or the Intelligent 
Identifier 
codes. 
5. With Vpp at high voltage, 
the standby 
curren~ equals 
lee + Ipp (standby). 
6. Refer to Table 
3 for valid Data-In 
during 
a write operation. 


7. X can be VIL or VIH. 
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Bus 
First Bus Cycle 
Second 
Bus Cycle 


Command 
Cycles 
Req'd 
Operation(l) 
Address(2) 
Oata(3) 
Operatlon(l) 
Address(2) 
Oata(3) 


Read Memory 
1 
Write 
X 
OOH 


Read Intelligent 
10 Codes 
3 
Write 
X 
90H 
Read 
(4) 
(4) 


Set-Up Erase/Erase(6) 
2 
Write 
X 
20H 
Write 
X 
20H 


Erase Verify(6) 
2 
Write 
EA 
AOH 
Read 
X 
EVO 


Set-Up Program/Program(5) 
2 
Write 
X 
40H 
Write 
PA 
PO 


Program Verify(5) 
2 
Write 
X 
COH 
Read 
X 
PVO 


Reset(7) 
2 
Write 
X 
FFH 
Write 
X 
FFH 


NOTES: 
1. Bus operation 
are defined 
in Table 
2. 
2. IA = Identifier 
address: 
OOH for manufacturer 
code, 01 H for device 
code. 
EA = Address 
of memory 
location 
to be read during 
erase verify. 
PA = Address 
of memory 
location 
to be programmed. 
Addresses 
are latched 
on the falling 
edge of the Write-Enable 
pulse. 
3. ID = Data read from 
location 
IA during 
device 
identification. 
(Mfr = 89H, Device 
= B9H). 
EVD = Data read from 
location 
EA during 
erase verify. 
PD = Data to be programmed 
at location 
PA. Data is latched 
on the rising edge of the Write-Enable. 


PVD = Data read from 
location 
PA during 
program 
verify. 
PA is latched 
on the Program 
command. 
4. Following 
the Read 
Intelligent 
ID command, 
two read operations 
access 
manufacturer 
and device 
codes. 


5. Figure 4 illustrates 
the Quick-Pulse 
Programming 
Algorithm. 
6. Figure 
5 illustrates 
the Quick-Erase 
Algorithm. 


7. The second 
bus cycle 
must be followed 
by the desired 
command 
register 
write. 


While 
Vpp 
is high, 
for 
erasure 
and 
programming, 
memory 
contents 
can 
be 
accessed 
via 
the 
read 
command. 
The read operation 
is initiated 
by writing 
OOH into 
the 
command 
register. 
Microprocessor 
read cycles 
retrieve 
array data. The device 
remains 
enabled 
for reads 
until the command 
register 
con- 
tents are altered. 


The default 
contents 
of the register 
upon Vpp pow- 
er-up is OOH. This default value ensures that no spu- 
rious alternation 
of memory 
contents 
occurs 
during 
the Vpp power 
transition. 
Where 
the Vpp supply 
is 
hard-wired 
to the 
28F256A, 
the 
device 
powers-up 
and remains 
enabled 
for reads 
until the command 
register 
contents 
are 
changed. 
Refer 
to 
the 
AC 
Read 
Characteristics 
and 
Waveforms 
for 
specific 
timing 
parameters. 


Flash memories 
are intended 
for use in applications 
where 
the 
local 
CPU 
alters 
memory 
contents. 
As 
such, 
manufacturer- 
and device-codes 
must be ac- 
cessible 
while the device 
resides 
in the target 
sys- 
tem. PROM programmers 
typically 
access 
signature 
codes by raising A9 to a high voltage. 
However, 
mul- 


tiplexing 
high voltage 
onto address 
lines is not a de- 
sired system-design 
practice. 


The 28F256A 
contains 
an Intelligent 
Identifier 
oper- 
ation to supplement 
traditional 
PROM-programming 
methodology. 
The 
operation 
is initiated 
by writing 
90H into the command 
register. 
Following 
the com- 


mand 
write, 
a read 
cycle 
from 
address 
OOOOHre- 
trieves 
the 
manufacturer 
code 
89H. 
A read 
cycle 
from 
address 
Q001 H returns 
the device 
code 
89H. 


To terminate 
the operation, 
it is necessary 
to write 
another 
valid command 
into the register. 
. 


Set-Up Erase/Erase 
Commands 


Set-up 
Erase 
is 
a 
command-only 
operation 
that 


stages 
the device 
for electrical 
erase of all bytes in 
the array. The set-up 
erase 
operation 
is performed 
by writing 
20H 
to the command 
register. 
To com- 
mence 
chip-erasure, 
the 
erase 
command 
(20H) 
must again be written 
to the register. 
The erase op- 
eration·begins 
with the rising edge of the Write-En- 
able pulse and terminate 
with the rising edge of the 
next 
Write-Enable 
pulse 
(Le., 
Erase-Verify 
Com- 
mand). 


This two-step 
sequence 
of set-up followed 
by execu- 
tion ensures 
that memory 
contents 
are not acciden- 
tally erased. Also, chip-erasure 
can only occur when 
high voltage 
is applied to the Vpp pin. In the absence 


of this high voltage, memory contents are protected 
against erasure. Refer to AC Erase Characteristics 
and Waveforms for specific timing parameters. 


The erase command erases all of the bytes of the 
array in parallel. After each erase operation, all bytes 
must be verified. The erase verify operation is initiat- 
ed by writing AOH into the command register. The 
address for the byte to be verified must be supplied 
as it is latched on the falling edge of the Write-En- 
able pulse. The register write terminates the erase 
operation with the rising edge of its Write-Enable 
pulse. 


The 28F256A applies an internally-generated margin 
voltage to the addressed byte. Reading FFH from 
the addressed byte indicates that all bits in the byte 
are erased. 


The erase-verify command must be written to the 
command register prior to each byte verification to 
latch its address. The process continues for each 
byte in the array until a byte does not return FFH 
data, or the last address is accessed. 
' 


In the case where the data read is not FFH, another 
erase operation is performed. (Refer to Set-Up 
Erase/Erase.) Verification then resumes from the 
address of the last-verified byte. Once all bytes in 
the array have been verified, the erase step is com- 
plete. The device can be programmed. At this point, 
the verify operation is terminated by writing a valid 
command (e.g., Program Set-Up) to the command 
register. Figure 5, the Quick-Erase algorithm, illus- 
trates how commands and bus operations are com- 
bined to perform electrical erasure of the 28F256A. 
Refer to AC Erase Characteristics and Waveforms 
for specific timing parameters. 


Set-up program is a command-only operation that 
stages the device for byte programming. Writing 40H 
into the command register performs the set-up oper- 
ation. 


Once the program set-up operation is performed, 
the next Write-Enable pulse causes a transition to 
an active programming operation. Addresses are in- 
ternally latched on the falling edge of the Write-En- 
able pulse. Data is internally latched on the rising 
edge of the Write-Enable pulse. The rising edge of 
Write-Enable also begins the programming opera- 
tion. The programming operation terminates with the 
next rising edge of Write-Enable, used to write the 


program-verify command. Refer to AC Programming 
Characteristics and Waveforms for specific timing 
parameters. 


Program Verify Command 


The 28F256A is programmed on a byte-by-byte ba- 
sis. Byte programming may occur sequentially or at 
random. Following each programming operation, the 
byte just programmed must be verified. 


The program-verify operation is initiated by writing 
COH into the command register. The register write 
terminates the programming operation with the ris- 
ing edge of its Write-Enable pulse. The program-ver- 
ify operation stages the device for verification of the 
byte last programmed. No new address information 
is latched. 


The 28F256A applies an internally-generated margin 
voltage to the byte. A microprocessor read cycle 
outputs the data. A successful comparison between 
the programmed byte and true data means that the 
byte is successfully programmed. Programming then 
proceeds to the next desired byte location. Figure 4, 
the 28F256A Quick-Pulse Programming algorithm, il- 
lustrates how commands are combined with bus op- 
erations to perform byte programming. Refer to AC 
Programming Characteristics and Waveforms for 
specific timing parameters. 


A reset command is provided as a means to safely 
abort the erase- or program-command sequences. 
Following either set-up command (erase or program) 
with two consecutive writes of FFH will safely abort 
the operation. Memory contents will not be altered. 
A valid command must then be written to place the 
device in the desired state. 


EXTENDED 
ERASE/PROGRAM 


CYCLING 


EEPROM cycling failures have always concerned 
users. The high electrical field required by thin oxide 
EEPROMs for tunneling can literally tear apart the 
oxide at defect regions. To combat this, some sup- 
pliers have implemented redundancy schemes, re- 
ducing cycling failures to insignificant levels. Howev- 
er, redundancy requires that cell size be doubled- 
an expensive solution. 


Intel has designed extended cycling capability into 
its ETOX II flash memory technology. Resulting im- 
provements in cycling reliability come without in- 
creasing memory cell size or complexity. First, an 


• 


advanced tunnel oxide increases the charge carry- 
ing ability ten-fold. Second, the oxide area per cell 
subjected to the tunneling electric field is one-tenth 
that of common EEPROMs, minimizing the probabili- 
ty of oxide defects in the region. Finally, the peak 
electric 
field 
during 
erasure 
is 
approximately 


2 MV/cm lower then EEPROM. The lower electric 
field greatly reduces oxide stress and the probability 
of failure-increasing 
time to wear out by a factor of 
100,000,000. 


The 28F256A is capable of 100,000 program/erase 
cycles. The device is programmed and erased using 
Intel's Quick-Pulse Programming and Quick-Erase 
algorithms. Intel's algorithmic approach uses a se- 
ries of operations (pulses), along with byte verifica- 
tion, to completely and reliably erase and program 
the device. 


For further reliability information, see Reliability Re- 
port RR-60 (ETOX II Reliability Data Summary). 


QUICK-PULSE 
PROGRAMMING 


ALGORITHM 


The Quick-Pulse Programming algorithm uses pro- 
gramming operations of 10 p..sduration. Each opera- 
tion is followed by a byte verification to determine 
when the addressed byte has been successfully pro- 
grammed. The algorithm allows for up to 25 pro- 
gramming operations per byte, although most bytes 
verify on the first or second operation. The entire 
sequence of programming and byte verification is 


performed with Vpp at high voltage. Figure 4 illus- 
trates the Quick-Pulse Programming algorithm. 


Intel's Quick-Erase algorithm yields fast and reliable 
electrical erasure of memory contents. The algo- 
rithm employs a closed-loop flow, similar to the 
Quick-Pulse Programming algorithm, to 
simulta- 


neously remove charge from all bits in the array. 
Erasure begins with a read of memory contents. The 
28F256A is erased when shipped from the factory. 
Reading FFH data from the device would immedi- 
ately be followed by device programming. 


For devices being erased and reprogrammed, uni- 
form and reliable erasure is ensured by first pro- 
gramming all bits in the device to their charged state 
(data 
= OOH). This is accomplished, using the 


Quick-Pulse Programming algorithm, 
in approxi- 


mately one-half second. 


Erase execution then continues with an initial erase 
operation. Erase verification (data = FFH) begins at 
address OOOOHand continues through the array to 
the last address, or until data other than FFH is en- 
countered. With each erase operation, an increasing 
number of bytes verify to the erased state. Erase 
efficiency may be improved by storing the address of 
the last byte verified in a register. Following the next 
erase operation, verification starts at that stored ad- 
dress location. Erasure typically occurs in one sec- 
ond. Figure 5 illustrates the Quick-Erase algorithm. 


Bus 
Command 
Comments 
Operation 


Standby 
Wait for Vpp ramp 
to VPPH (= 12.0V) (1) 


Initialize pulse-count 


Write 
Set-Up 
Data = 40H 


Program 


Write 
Program 
Valid address/data 


Standby 
Duration of Program 
operation 
(tWHWH1) 
Write 
Program(2) 
Data = COH; Stops (3) 


Verify 
Program Operation 


Standby 
tWHGL 


Read 
Read byte to verify 
programming 


Standby 
Compare 
data output 
to data expected 


Write 
Read 
Data = OOH,resets the 
register for read 
operations. 


Standby 
Wait for Vpp ramp 
to Vppd1) 


NOTES: 
1. See DC Characteristics 
for the value of VPPH and VpPL. 
2. 
Program 
Verify 
is only 
performed 
after 
by1e program- 
ming. 
A final 
read/compare 
may 
be performed 
(optional) 


after the register 
is written 
with the Read command. 
3. Refer to principles 
of operation. 


4. CAUTION: 
The algorithm 
MUST 
BE FOLLOWED 
to en- 


sure proper 
and reliable 
operation 
of the device. 


Figure 4. 28F256A 
Quick-Pulse 
Programming 
Algorithm 
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Bus 
Command 
Comments 
Operation 


Standby 
Wait for Vpp ramp 
to VPPH (= 12.0V) (1) 
Use Quick-Pulse 
Programming 
(Fig. 4) 


Initialize Addresses, 
Erase Pulse Width, 
and Pulse Count 


Write 
Set-Up 
Data = 20H 


Erase 


Write 
Erase 
Data = 20H 


Standby 
Duration of Erase 
operation 
(tWHWH2) 


Write 
Erase 
Addr = Byte to verify; 


Verify(2) 
Data = AOH; Stops 
Erase Operation 
(3) 


Standby 
tWHGL 


Read 
Read byte to verify 
erasure 


Standby 
Compare 
output to FFH 


increment 
pulse count 


Write 
Read 
Data = OOH, resets the 
register for read 
operations. 


Standby 
Wait for Vpp ramp 
to Vppd1) 


NOTES: 
1. See DC Characteristics for the value of VpPHand VPPL. 
2. Erase Verify is performed only after chip-erasure. A final 
read/compare may be performed (optional) after the regis- 
ter is written with the Read command. 


Figure 5. 28F256A 
Quick-Erase 
Algorithm 


3. Refer to principles of operation. 
4. CAUTION: The algorithm MUST BE FOLLOWED to en- 
sure proper and reliable operation of the device. 


Flash memory power-switching characteristics re- 
quire careful device decoupling. System designers 
are interested in three supply current (Icel issues- 
standby, active, and transient current peaks pro- 
duced by falling and rising edges of chip-enable. The 
capacitive and inductive loads on the device outputs 
determine the magnitudes of these peaks. 


Two-line control and proper decoupling capacitor 
selection will 
suppress transient voltage 
peaks. 


Each device should have a 0.1 fLFceramic capacitor 
connected between Vcc and Vss, and between Vpp 
and Vss. 


Place the high-frequency, low-inherent-inductance 
capacitors as close as possible to the devices. Also, 
for every eight devices, a 4.7 fLFelectrolytic capaci- 
tor should be placed at the array's power supply 
connection, between Vcc and Vss. The bulk capaci- 
tor will overcome voltage slumps caused by printed- 
circuit-board 
trace 
inductance, 
and 
will 
supply 
charge to the smaller capacitors as needed. 


Table 4. 28F256A Typical Update Power Dissipation(4) 


DESIGN 
CONSIDERATIONS 


Two-Line 
Output Control 


Flash memories are often used in larger memory ar- 
rays. Intel provides two read-control inputs to ac- 
commodate multiple memory connections. Two-line 
control provides for: 
a. the lowest possible memory power dissipation, 


and 
b. complete assurance that output bus contention 
will not occur. 


To efficiently use these two control units, an ad- 
dress-decoder 
output 
should 
drive 
chip-enable, 


while the system's read signal controls all flash 
memories and other parallel memories. This assures 
that only enabled memory devices have active out- 
puts, while deselected devices maintain the low 
power standby condition. 


Vpp Trace on Printed Circuit Boards 


Programming flash memories, while they reside in 
the target smith, requires that the printed circuit 
board designer pay attention to the Vpp pin power 
supply trace. Use similar trace widths and layout 
considerations given the Vcc power bus. Adequate 
Vpp supply traces and decoupling will decrease Vpp 
voltage spikes and overshoots. 


Power Up/Down 
Protection 


The 28F256A is designed to offer protection against 
accidental erasure or programming during power 
transitions. Upon power-up, the 28F256A is indiffer- 
ent as to which power supply, Vpp or Vcc, powers 
up first. Power supply sequencing Is not required. 
Internal circuitry in the 28F256A ensures that the 
command register is reset to the read mode upon 
power up. 


A system designer must guard against active writes 
for Vcc voltages above VLKOwhen Vpp is active. 
Since both WEII and CEII must be low for a com- 
mand write, driving either to VIH will inhibit writes. 
The control register architecture provides an added 
level of protection since alteration of memory con- 
tents only occurs after successful completion of the 
two-step command sequences. 


When designing portable systems, designers must 
consider battery power consumption not only during 
device operation, but also for data retention during 
system idle time. Flash nonvolatility increases the 
usable battery life of your system because the 
28F256A does not consume any power to retain 
code or data when the system is off. Table 4 illus- 
trates the power dissipated when updating the 
28F256A. 


Operation 
Power Dissipation 
Notes 
(Watt-Seconds) 


Array Program/Program Verify 
0.043 
1 


Array Erase/Erase Verify 
0.083 
2 


One Complete Cycle 
0.169 
3 


NOTES: 
1. Formula 
to calculate 
typical 
Program/Program 
Verify 
Power 
= [Vpp 
X II Bytes 
x 
typical 
II Prog 
Pulses 
(tWHWH1 x 


IpP2 typical + tWHGL X IpP4 typical)] 
+ [Vcc 
x 
II Bytes 
x 
typical 
II Prog Pulses 
(twHWH1 
x 
ICC2 typical + tWHGL X 


ICC4 typical)]. 
2. Formula 
to calculate 
typical 
Erase/Erase 
Verify 
Power = [Vr'p (lpP3 typical 
x 
tERASE typical + IpP5 typical 
x 
tWHGL X 


# Bytes)) 
+ 
[Vcc<ICC3 typical 
x 
tERASE typical 
+ Iccs typica 
x 
tWHGL X # Bytes)). 
3. One Complete 
Cycle 
= Array 
Preprogram 
+ Array 
Erase + Program. 
4. "Typicals" 
are not guaranteed, 
but based 
on a limited 
number 
of samples 
from 
production 
lots. 
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NOTICE: This is a production data sheet. The specifi- 
cations are subject to change without notice. 


• WARNING: Stressing the device beyond the "Absolute 
Maximum 
Ratings" 
may 
cause 
permanent 
damage. 


These are stress ratings only. Operation 
beyond 
the 
"Operating 
Conditions" 
is not recommended 
and ex- 


tended 
exposure 
beyond 
the 
"Operating 
Conditions" 


may affect device reliability. 


Operating 
Temperature 


During Read 
0·Cto 
+70·C(1) 


During Erase/Program 
O·C to + 70·C 


Temperature 
Under Bias' 
-1 O·C to + 80·C 


Storage Temperature 
-65·C 
to + 125·C 


Voltage 
on Any Pin with 
Respect 
to Ground 
- 2.0V to + 7.0V(2) 


Voltage 
on Pin Ag with 
Respect 
to Ground 
- 2.0V to + 13.5V(2, 3) 


Vpp Supply Voltage 
with 


Respect 
to Ground 
During Erase/Program 
..... 
- 2.0V to + 14.0(2. 3) 


Vcc 
Supply Voltage 
with 
Respect 
to Ground 
- 2.0V to + 7.0V(2) 


Output Short Circuit Current 
100 mA(4) 


NOTES: 
1. Operating temperature is for commercial product defined by this specification. 
2. Minimum DC input voltage is -0.5V. 
During transitions, inputs may undershoot to -2.0V 
for periods less than 20 ns. 


Maximum DC voltage on output pins is Vcc +0.5V, which may overshoot to Vcc +2.0V for periods less than 20 ns. 
3. Maximum DC voltage on Ag or Vpp may overshoot to + 14.0V for periods less than 20 ns. 
4. Output shorted for no more than one second. No more than one output shorted at a time. 


Symbol 
Parameter 
Limits 
Unit 
Comments 
Mln 
Max 


TA 
Operating 
Temperature 
0 
70 
·C 
For Read-Only 
and 


Read/Write 
Operations 


Vcc 
Vcc Supply Voltage 
4.50 
5.50 
V 
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Symbol 
Parameter 
Notes 
Limits 
Unit 
Test Conditions 


Mln 
Typlcal(4) 
Max 


III 
Input Leakage Current 
1 
±1.0 
/-LA Vcc = Vccmax 


VIN = Vcc or Vss 


ILO 
Output 
Leakage Current 
1 
±10.0 
/-LA Vcc = Vccmax 


VOUT = Vcc or Vss 


Iccs 
Vcc Standby 
Current 
1 
0.3 
1.0 
mA Vcc = Vccmax 


CE# 
= VIH 


ICC1 
Vcc Active Read Current 
1 
10 
30 
mA Vcc = Vccmax 
CE# 
= VIL 
f = 6 MHz, lOUT = 0 mA 


ICC2 
Vcc Programming 
Current 
1,2 
1.0 
10 
mA 
Programming 
in Progress 


ICC3 
~cc 
Erasure Current 
1,2 
5.0 
15 
mA 
Erasure in Progress 


ICC4 
Vcc Program Verify Current 
1,2 
5.0 
15 
mA 
Vpp = VPPH 
Program Verify in Progress 


Iccs 
Vcc Erase Verify Current 
1,2 
5.0 
15 
mA 
Vpp = VPPH 
Erase Verify in Progress 


Ipps 
Vpp Leakage Current 
1 
±10.0 
/-LA Vpp s: Vcc 


IpP1 
Vpp Read Current, 
10 Current, 
1 
90 
200 
/-LA Vpp> 
Vcc 
or Standby Current 
±10.0 
Vpp s: Vcc 


IpP2 
Vpp Programming 
Current 
1,2 
8.0 
30 
mA Vpp = VPPH 


Programming 
in Progress 


IpP3 
Vpp Erase Current 
1,2 
4.0 
20 
mA Vpp = VPPH 


Erasure in Progress 


IpP4 
Vpp Program Verify Current 
1,2 
2.0 
5.0 
mA Vpp = VPPH 


Program Verify in Progress 


Ipps 
Vpp Erase Verify Current 
1,2 
2.0 
5.0 
mA Vpp = VPPH 


Erase Verify in Progress 


VIL 
Input Low Voltage 
-0.5 
0.8 
V 


VIH 
Input High Voltage 
2.0 
Vcc + 0.5 
V 


VOL 
Output 
Low Voltage 
0.45 
V 
IOL = 5.8mA 


Vcc = Vccmin 


VOH1 
Output High Voltage 
2.4 
V 
IOH = -2.5 
mA 


Vcc = Vccmin 


VIO 
Ag Intelligent 
Identifier 
11.50 
13.00 
V 


Voltage 


110 
Ag Intelligent 
Identifier 
1,2 
90 
200 
/-LA Ag = VIO 


Current 


VPPL 
Vpp During Read-Only 
0.00 
6.5 
V 
Note: Erase/Program 
are 
Operations 
Inhibited when Vpp = VPPL 


VPPH 
Vpp During Read/Write 
11.40 
12.60 
V 


Operations 


VLKO 
Vcc Erase/Write 
Lock Voltage 
2.5 
V 


Symbol 
Parameter 
Notes 
Limits 
Unit 
Test Conditions 


Min 
Typical(4) 
Max 


III 
Input Leakage Current 
1 
±1.0 
p.A Vcc = Vccmax 


VIN = VccorVss 


ILO 
Output Leakage Current 
1 
±10.0 
p.A Vcc = Vccmax 
VOUT = Vcc or Vss 


Iccs 
Vcc Standby 
Current 
1 
50 
100 
p.A Vcc = Vccmax 


CE# 
= Vcc 
±0.2V 


ICCl 
Vcc Active Read Current 
1 
10 
30 
mA Vcc = VccmaxCE# 
= VIL 
f = 6 MHz, lOUT = 0 mA 


ICC2 
Vcc Programming 
Current 
1,2 
1.0 
10 
mA Programming 
in Progress 


ICC3 
Vcc Erase Current 
1,2 
5.0 
15 
mA Erasure in Progress 


ICC4 
Vcc Program Verify Current 
1,2 
5.0 
15 
mA Vpp = VPPH 


Program Verify in Progress 


ICC5 
Vcc Erase Verify Current 
1,2 
5.0 
15 
mA Vpp = VPPH 


Erase Verify in Progress 


Ipps 
Vpp Leakage Current 
1 
±10.0 
p.A Vpp ~ Vcc 


IpPl 
Vpp Read Current,lD 
1 
90 
200 
p.A Vpp >Vcc 
Current, or Standby Current 
±10.0 
Vpp ~ Vcc 


IpP2 
Vpp Programming 
Current 
1,2 
8.0 
30 
mA Vpp = VPPH 


Programming 
in Progress 


IpP3 
Vpp Erase Current 
1,2 
4.0 
20 
mA Vpp = VPPH 


Erasure in Progress 


IpP4 
Vpp Program Verify Current 
1,2 
2.0 
5.0 
mA Vpp = VPPH 


Program Verify in Progress 


IpP5 
Vpp Erase Verify Current 
1,2 
2.0 
5.0 
mA Vpp = VPPH 


Erase Verify in Progress 


VIL 
Input Low Voltage 
-0.5 
0.8 
V 


VIH 
Input High Voltage 
0.7Vcc 
Vcc + 0.5 
V 


VOL 
Output 
Low Voltage 
0.45 
V 
IOL = 5.8mA 
Vcc = Vccmin 


VOHl 
Output 
High Voltage 
0.85Vcc 
V 
IOH = - 2.5 mA, 


Vcc = Vccmin 


VOH2 
Vcc 
-0.4 
IOH = 100 p.A, 


Vcc = Vccmin 


VIO 
Aglntelligent 
Identifier 
11.50 
13.00 
V 


Voltage 


110 
Ag Intelligent 
Identifier 
1,2 
90 
200 
p.A Ag = VIO 


Current 


Symbol 
Parameter 
Notes 
Limits 
Unit 
Test Conditions 
Min 
Typlcal(4) 
Max 


VPPl 
Vpp During Read-Only 
0.00 
6.5 
V 
Note: Erase/Program 
are 
Operations 
Inhibited when Vpp = VPPl 


VPPH 
Vpp During Read/Write 
11.40 
12.60 
V 


Operations 


VlKO 
Vcc Erase/Write 
Lock Voltage 
2.5 
V 


Limits 
Symbol 
Parameter 
Notes 
Unit 
Conditions 
Mln 
Max 


CIN 
Address/Control 
3 
6 
pF 
VIN = OV 


Capacitance 


COUT 
Output Capacitance 
3 
12 
pF 
VOUT = OV 


NOTES 
FOR DC CHARACTERISTICS 
AND CAPACITANCE: 


1. All currents 
are in RMS unless 
otherwise 
noted. 
Typical 
values 
at Vcc 
= 5.0V, VPP = 12.0V, T = 25'C. 
These 
currents 
are valid for all product 
versions 
(Packages 
and Speeds). 
2. Not 100% 
tested: 
characterization 
data available. 


3. Sampled, 
not 100% 
tested. 
4. "Typicals" 
are not guaranteed, 
but based 
on a limited 
number 
of samples 
from 
production 
lots . 


2.4~ 
INPUT 0.45 --' 
~}> 
TEST POINTS 


OUTPUT 
XX>< ~:~ 
}> TEST POINTS 


290243-7 


ACTesling: Inputs are driven al2.5Vfor 
a logic "1" and 0.45 for a 


logic "0". Testing measurements are made a12.0 for a logic "1" 
and 0.8 for a logic "0". Rise/Fall time ,;: 10 ns. 


AC Test Conditions 


Input Rise and Fall Times (10% to 90%) 
10 ns 


Input Pulse Levels 
0.45 and 2.4 


Input Timing Reference 
Level 
0.8 and 2.0 


Output Timing Reference 
Level 
0.8 and 2.0 


1.3V 
-- 


A 
lN914 


3.3k 


DEVICE 
UNDER 
OUT 


TEST 
.tCl 
= lOOp, 


- 
Cl = 100 pF 
290243-8 


Cl includes Jig Capacitance 
• 
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Versions 
Notes 
28F256A·120 
28F256A·150 
Unit 


Symbol 
Characteristic 
Min 
Max 
Min 
Max 


tAYAy/tRC 
Read Cycle Time 
120 
150 
ns 


tELQy/tCE 
Chip Enable Access Time 
120 
150 
ns 


tAYQy/tACC 
Address 
Access Time 
120 
150 
ns 


tGLQy/tOE 
Output Enable 
50 
55 
ns 
Access Time 


tELQX/tLZ 
Chip Enable to Output 
2,3 
0 
0 
ns 
in Low Z 


tEHQZ 
Chip Disable to Output 
2 
55 
55 
ns 
in High Z 


tGLQX/tOLZ 
Output Enable to Output 
2,3 
0 
0 
ns 
in LowZ 


tGHQZ/tOF 
Output Disable to Output 
2 
30 
35 
ns 
in HighZ 


toH 
Output Hold from Address, 
1,2 
0 
0 
ns 
CE #, or OE # Change 


tWHGL 
Write Recovery 
Time 
6 
6 
fLs 
before Read 


NOTES: 
1. Whichever 
occurs 
first. 


2. Sampled, 
not 100% 
tested. 
3. Guaranteed 
by design. 


50V J 
v'" 
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Versions 
Notes 
28F256A·120 
28F256A·150 
Unit 
Symbol 
Characteristic 
Mln 
Max 
Mln 
Max 


tAVAV/twc 
Write Cycle Time 
120 
150 
ns 


tAvwL/tAS 
Address 
Set-Up Time 
0 
0 
ns 


tWLAX/tAH 
Address 
Hold Time 
60 
60 
ns 


tDVWH/tDS 
Data Set-Up Time 
50 
50 
ns 


tWHDX/tDH 
Data Hold Time 
10 
10 
ns 


tWHGL 
Write Recovery 
Time 
6 
6 
JLs 
before Read 


tGHWL 
Read Recovery 
Time 
2 
0 
0 
JLs 
before Write 


tELWL/tCS 
Chip Enable Set-Up 
20 
20 
ns 
Time before Write 


tWHEH/teH 
Chip Enable Hold Time 
0 
0 
ns 


tWLWH/twp 
Write Pulse Width 
60 
60 
ns 


tWHWL/twPH 
Write Pulse Width High 
20 
20 
ns 


tWHWH1 
Duration of 
3 
10 
10 
JLs 
Programming 
Operation 


tWHWH2 
Duration of 
3 
9.5 
9.5 
ms 
Erase Operation 


tVPEL 
Vpp Set-Up Time to 
2 
1.0 
1.0 
JLs 
Chip Enable Low 


NOTES: 
1. Read timing parameters during read/write operations are the same as during read-only operations. Refer to AC Charac- 
teristics for Read-Only Operations. 
2. Guaranteed by design. 
3. The integrated stop timer terminates the programming/erase operations, thereby eliminating the need for a maximum 
specification. 


Limits 


Parameter 
Notes 
28F256A·120 
28F256A·150 
Unit 


Mln 
Typ 
Max 
Mln 
Typ 
Max 


Chip Erase Time 
1,3,4 
1 
10 
1 
10 
see 


Chip Program Time 
1,2,4 
0.5 
3 
0.5 
3 
see 


NOTES: 
1. "Typicals" are not guaranteed, but based on a limited number of samples taken from production lots. Data taken lit 25°C, 
12.0V Vpp, at 0 cycles. 
2. Minimum byte programming time excluding system overhead is 16!'-s program + 6 !'-Swrite recovery), while maximum is 
400 !,-s/byte (16 !'-Sx 25 loops allowed by algorithm). Max chip programming is specified lower than the worst case allowed 
by the programming algorithm since most bytes program significantly faster than the worst case byte. 
3. Excludes OOHProgramming Prior to Erasure. 
4. Excludes System-Level Overhead. 
5. Refer to RR-60 "ETOX" II Flash Memory Reliability Data Summary for typical cycling data and failure rate calculations. 
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Versions 
Notes 
28F256A·120 
28F256A·150 
Unit 
Symbol 
Characteristic 
Mln 
Max 
Mln 
Max 


tAVAV 
Write Cycle Time 
120 
150 
ns 


tAVEL 
Address 
Set-Up Time 
0 
0 
ns 


tELAX 
Address 
Hold Time 
80 
80 
ns 


tOVEH 
Data Set-Up Time 
50 
50 
ns 


tEHOX 
Data Hold Time 
10 
10 
ns 


tEHGL 
Write Recovery 
Time 
6 
6 
/Ls 
before Read 


tGHEL 
Read Recover 
Time 
2 
0 
0 
/Ls 
before Write 


tWLEL 
Write Enable Set-Up Time 
0 
0 
ns 
before Chip-Enable 


tEHWH 
Write Enable Hold Time 
0 
0 
ns 


tELEH 
Write Pulse Width 
1 
70 
70 
ns 


tEHEL 
Write Pulse Width High 
20 
20 
ns 


tVPEL 
Vpp Set-Up Time 
2 
1.0 
1.0 
/Ls 
to Chip-Enable 
Low 


NOTE: 
1. Chip-Enable 
Controlled 
Writes: 
Write 
operations 
are driven 
by the valid combination 
of Chip-Enable 
and Write-Enable. 
In 
systems 
where 
Chip-Enable 
defines 
the write 
pulse width 
(with a longer 
Write-Enable 
timing 
waveform) 
all set-up, 
hold and 
inactive 
Write-Enable 
times 
should 
be measured 
relative 
to the Chip-Enable 
waveform. 
2. Guaranteed 
by design. 
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P28F256A-120 
P28F256A-150 


ER-20, 


ER-24, 


RR-60, 


AP-316, 


"ETOX 
II Flash Memory Technology" 


"Intel 
Flash Memory" 


"ETOX 
II Flash Memory 
Reliability 
Data Summary" 


"Using 
Flash Memory for In-System 
Reprogramming 
Nonvolatile 
Storage" 


"Guide 
to Flash Memory 
Reprogramming" 


Order Number 
294005 


294008 


293002 


292046 


Number 
Description 


004 
Removed 
Preliminary 
Classification. 
Removed 
200 ns speed bin. 
Revised 
Erase Maximum 
Pulse Count for Figure 5 from 3000 to 1000. 


Clarified AC and DC test conditions. 


005 
Corrected 
AC waveforms. 


006 
Revised symbols; 
Le., CE, OE, etc. to CE#, 
OE#, 
etc. 
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Intel's ETOX II (EPROM tunnel oxide) flash memory 
technology uses a single-transistor cell to provide in- 
system reprogrammable 
nonvolatile storage. Repro- 
gramming entails electrically erasing all bits in parallel 
and then randomly programming any byte in the array. 
This new technology offers designers alternatives for 
two of industry's needs: 1) a cost-effective means of 
updating program code; and 2) a solid-state approach 
for non-volatile data accumulation or storage. 


This application note: 
• introduces you to the concepts of in-system writing; 


• discusses the hardware and software considerations 
for reprogramming flash memories in-system; 
• offers a checklist for integrating Intel's flash memo- 
ries into microprocessor- or microcontroller-based 
systems; and 
• shows an example of an 80CI86 design which incor- 
porates flash memory. 


1.1 PROM Programmer 
vs System- 
Processor 
Controlled 
Programming 


While soldered to a printed circuit board, one of two 
sources controls flash memory reprogramming: 
1) a 
PROM programmer connected to th~ board, or 2) the 
system's own central processing unit (CPU). These are 
called on-board programming 
(OBP), and in-system 
writing (ISW), respectively. With OBP, the PROM 
programmer supplies the programming voltage (Vpp) 
and the programming intelligence; with ISW, Vpp is 
generated locally and the system itself drives the repro- 
gramming process. Both methods offer a variety of ben- 
efits. However this application note focuses on ISW. 


NOTE: 
See Appendix A for OPB design considerations. 


ETOX II flash memory technology programs extreme- 
ly quick, permitting 
"on-the-fly" 
programming 
with 
unbuffered 19.2K baud data input. The remote ISW 
system handles the serial communication link for the 
host interface, as well as the flash memory reprogram- 
ming. 


Flash memories enable code version updates using sim- 
ple hardware designs. Beyond the basic system, a local 
Vpp supply is all that is needed for remote code down- 
load. 


A central host computer can download program code 
to many remote systems. Flash memory offers this ca- 
pability without the drawbacks of other technologies. It 
is solid-state and nonvolatile, thus eliminating mechani- 
cal component wear-out (cornmon with disk drives) 
and the risk of losing updates (a concern with battery- 
backed RAM). These aspects of flash memory offer 
major advantages in automated factories, remote sys- 
tems, portable equipment and other applications. Final- 
Iy, flash memories provide this capability at a much 
lower cost than byte-alterable EEPROM and battery- 
backed SRAM. 


Intel's flash memories allow single-byte programming 
for data accumulation applications. A remote data-log- 
ger uploads its information to a central host via serial 
link. The flash memory device is then in-system erased 


-~ 
S 


Figure 1. These diagrams 
illustrate 
OBP and ISW. In OBP, a PROM programmer 
updates 
a system's 
flash memory. 
The ISW diagram 
shows a host updating 
remote 
flash memory 
via serial link. The 
remote 
system 
performs 
the flash reprogramming 
with its own CPU. 
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be configured to track and monitor power usage and 
report the data to a central computer for billing and 
utility management. This reduces the cost of manual 
door-to-door meter reading. 


2.0 
DEVICE 
FEATURES 
AND ISW 
APPLICATION 
CONSIDERATIONS 


This section gives a brief overview of Intel's flash mem- 
ory features and explains how they facilitate ISW de- 
sign. 


The 32-pin DIP memory site is forward-compatible 
from the 256K bit to the 2 Mbit flash memory density. 
It fits into the 27COIO Mbit EPROM pinout and re- 
quires no multiplexed pins. Also, with just a single cir- 
cuit-board jumper 
trace, a 28-pin EPROM 
can be 
placed in the lower pins of the 32-pin flash memory 
site. (See Figures 2A and 2B, Flash Memory Pinouts.) 
For more information on intertechnology pin compati- 
bility see Ap Brief AB-25. 


2M 
(256K 
x 8) 


1M 
(128Kx8) 


512K 
(64K 
x 8) 


256K 
(32K 
x 8) 


2 


3 


4 


5 


6 


7 
32 
PIN DIP 


8 
0.800" 
WIDE 


9 
TOP VIEW 


10 


11 


12 


13 


14 


15 


16 
• 


intel~ 


2~ (256K 
X 8) 


1~ (128K 
X 8) 


512K 
(64K 
X 8) 


256K 
(32K 
X 8) 


A15 


Al 
2 
NC 
NC 
Vpp 
Vcc 
WE # 


Bus 
First Bus Cycle 
Second Bus Cycle 


Command 
Cycles 
Opera- 
Addr(1) 
Data(2) 
Oper- 
Addr(1) 
Data(2) 
Req'd 
atlon 
atlon 


Read Memory(3) 
1 
Write 
X 
OOH 
Read 
Valid 
Valid 


Read Intelligent 
Identifier 
1 
Write 
X 
90H 
Read 
OO/01H 
10 


Set-Up Erase/Erase 
2 
Write 
X 
20H 
Write 
X 
20H 


Erase Verify 
2 
Write 
EA 
AOH 
Read 
X 
EVO 


Set-Up Program/Program 
2 
Write 
X 
40H 
Write 
PA 
PO 


Program Verify 
2 
Write 
X 
COH 
Read 
X 
PVO 


Reset(3) 
2 
Write 
X 
FFH 
Write 
X 
FFH 


NOTES: 
1. Addresses 
are latched 
on the falling 
edge of the Write-Enable 
pulse. 
EA = Address 
of memory 
location 
to be read during erase verify. 
PA = Address 
of memory 
location 
to be read during 
program 
verify. 
2. EVD = Data read from 
location 
EA during 
erase verify. 


PO = Data to be programmed 
at location 
PA. Data is latched 
on the rising edge of Write-Enable. 
PVD = Data read from 
location 
PA during 
program 
verify. 
PA is latched 
on the Program 
command. 
3. The second 
bus cycle 
must be followed 
by the next desired 
command 
register 
write. given the proper 
delay times. 


Simplified Processor Interface 


Intel's 
command 
register architecture 
simplifies the 


processor 
interface. 
The 
command 
register 
allows 
CE#, 
WE#, 
and OE# 
to have standard read/write 


functionality. All commands such as "Set-up Program" 
or "Program Verify" can be written with standard sys- 
tem timings. Raising Vpp to 12V enables the command 
register for memory read/write operation, while lower- 
ing Vpp below Vcc + 2V restores the device to a read 
only memory. 


Writing to the register toggles an internal state-ma- 
chine. The state-machine output controls device func- 
tionality. 
Some commands 
require one write cycle, 


while others require two. The command register itself 
does not occupy an addressable memory location. The 
register simply stores the command, along with address 
and data needed to execute the command. With this 
architecture, the device expects the first write cycle to 
be a command and does not corrupt data at the speci- 
fied address. Table 1 contains a list of command regis- 
ter instructions. 


The following sections describe the commands in rela- 
tion to device operation. For more information on the 
command register see the appropriate 
flash memory 
data sheets, and Section 4.4 "Reprogramming 
Rou- 


tines". 


This command allows for normal memory read opera- 
tions with Vpp turned on. After writing the command 
and waiting 6 /-Ls, the CPU can read from the memory 


at system speeds. Once placed in the read mode no 
further action is required on the command register for 
subsequent read operations. 


Read Intelligent Identifier Command-90H 


Most PROM programmers read the device's intelligent 
• 
identifier to select the proper programming algorithm. 
On EPROMs, raising A9 to the Vpp level configures 
the device for this purpose. Since this is unacceptable 
in-system, you can read the flash memory intelligent 
identifier by first writing command 90H. Follow this by 
reading addressססoo and 000lH for the manufacturer 
and device ID. Reset the device with the Read Memory 
command after you have read the identifier. 


Set-Up Erase/Erase Commands-20H 


Write this command (20H) twice in succession to initi- 
ate erasure. The first write cycle sets up the device for 
erasure. The device starts erasing itself on the second 
command's 
rising edge of Write-Enable. 
Erasure 
is 


stopped when the CPU issues the Erase Verify com- 
mand or when the device's integrated stop timer times 
out. Integrated 
stop timers provide a safety net for 


complex system environments. In these environments, 
s/w timer accuracy may be difficult to achieve. Some 
method of timing is still required, however the timer 
need only meet a minimum specification (10 ms). This 
is far easier than calibrating a timer to meet both a 
minimum 
and 
maximum 
specification 
(10 
ms 


± 500 /-Ls). 


NOTE: 
Prior to erasure, it is necessary to program all bytes to 
the same level (data = OOH).See the Quick-Erase al- 
gorithm for more details. 


Erase Verify Command-AOH 


The erase command erases all bytes of the array in par- 
allel. After each erase operation, all bytes must be veri- 
fied to see if they erased. Write the Erase Verify com- 
mand (AOH) to stop erasure and setup verification. 


Alternatively, you may allow the internal stop timer to 
halt erasure. You must still issue the Erase Verify com- 
mand to set up verification. 


The device latches the address to be verified on the 
falling edge of WE# 
and the actual command on the 
rising edge. Wait 6 J.l.sbefore reading the data at the 
address specified on the previous write cycle. 


The flash memory applies an internally-generated refer- 
ence voltage to the addressed byte. Reading OFFH from 
the addressed byte in this mode indicates that all bits in 
the byte are erased with sufficient margin to Vcc and 
temperature fluctuations. 


If the location is erased, then repeat the Erase Verify 
procedure for the next address location. Write the com- 
mand prior to each byte verification to latch the byte's 
address. Continue this process for each byte in the ar- 
ray until a byte does not return OFFH data, or the last 
address is accessed. 


In the case where the data read is not OFFH, perform 
another erase operation. (Refer to Set-up EraseJErase). 
Continue verifying from the address of the last verified 
byte. Once you have accessed the last address, erasure 
is complete and you can proceed to program the device. 
Terminate the erase verify operation by writing another 
valid command (e.g., Program Set-up). 


Set-up Program/Program Commands-40H 


Write this command (40H) twice in succession to initi- 
ate programming. The first write cycle sets up the de- 
vice for programming. The device latches address and 
data on the falling and rising edges of the second write 
cycle, respectively. It also begins programming on the 
rising edge. You stop the programming operation by 
issuing the Program Verify command, or by allowing 
the integrated program stop timer to time out. This 
timer works similiar to the erase stop timer. Again, a 
minimum specification replaces a tougher minimum! 
maximum combination (10 J.l.s-25 J.l.s). 


Program Verify Command-COH 


Flash memory devices program on a byte-by-byte basis. 
After each programming operation, the byte just pro- 
grammed must be verified. Write the Program Verify 
command (COH) to stop programming and set-up veri- 
fication. Should your software allow the integrated stop 
timer to halt programming, the software must resume 
the algorithm with the Program Verify command. The 
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device executes this command on the rising edge of 
Write-Enable. The program Verify command stages the 
device for verification of the byte last programmed. No 
new address information is latched. 


The flash memory applies an internally-generated refer- 
ence voltage to the addressed byte. Wait 6 J.l.sfor the 
internal voltages to settle before reading the data at the 
address programmed. Reading valid data indicates that 
the byte programmed successfully. 


Command Register Reset-FFH 


Flash memories reset to the read mode during power- 
up, and remain in this mode as long as Vpp is less than 
VCC + 2V. If your system leaves Vpp turned-on dur- 
ing a system reset, then incorporate a command register 
device 
reset into the hardware initialization routines. 


This is necessary because the CPU might be controlling 
programming or erasure when the system reset hits. 


Write the reset command (OFFH) twice in succession 
to reset the device. The double write is necessary be- 
cause of the state-machine reprogramming 
structure. 


For example, suppose the system is reset after a Set-up 
Program command. The flash memory state machine 
expects the next write cycle to contain valid address 
and data for programming, followed by another write 
cycle for program verification. The first Reset com- 
mand will be mistaken for program data but will not 
corrupt the existing data. This is because the command 
(data = OFFH) is a null condition for flash memory 
programming. Only data bits programmed to zero pull 
charge onto the memory cell and change the data. The 
second write cycle actually resets the device to the read 
function. Following the second reset cycle, you can 
write the next command (Read, Program Set-up, Erase 
Set-up, etc.). 


If the Vpp supply is turned off upon system reset, the 
software reset is not required. The flash memory will 
reset itself automatically when Vpp powers down. 


Data Protection on Power Transitions 


The command register architecture offers another bene- 
fit in addition to simplified processor interfaee--during 
system power-up and power-down it protects data from 
corruption by unstable logic. Erasure or programming 
require Vpp to be greater than Vcc + 2V and the 
proper command sequence to be initiated. For example 
the CPU must write the erase command twice in suc- 
cession. The odds of this occurring randomly are slim. 
Additionally, should Vpp ramp to l2V prior to Vcc 
ramping past 2.5V, the device will lock out all spurious 
writes and internally block l2V from the flash memory 
cells. For even greater security, you can switch Vpp as 
discussed in Section 3.13. 
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Flash memories, like EPROMs, require a l2V external- 
ly-generated power supply for reprogramming. Intel's 
Vpp specifications l2.0V 
±O.6V (5%) is compatible 
with most off-the-shelf (or available in-system) power 
supplies. (Note, Section 3.1 discusses Vpp generation 
techniques, and Appendix B shows different circuit al- 
ternatives. ) 


It is essential to use the specified Vpp when reprogram- 
ming the flash memory device. Once the command to 
erase, program, or verify is issued, the device internally 
derives the required voltages from the Vpp supply. The 
command register controls selection of internal refer- 
ence circuitry tapped off of Vpp. An improper Vpp lev- 
el causes the references to be wrong, degrading the per- 
formance of the part. 


(When programming V.V. EPROMs, Vcc is raised to 
6.5V. On flash memories, the Vpp reference circuitry 
and command register architecture provide the same 
function while keeping Vcc and Vpp at static levels. 
An incorrect Vcc level during V.V. EPROM program- 
ming poses similar hazards to improper Vpp levels on 
flash memories.) 


The hardware design section discusses various methods 
for generating Vpp. 


Covered in this section are the following: 


• Description 
of 
ISW-specific 
functional 
system 
blocks including memory requirements 


• Vpp generation techniques 
• Communication Considerations 


• processor or controller 


• limited amount EP/ROM 
or other flash memory 
devices for boot code, communications s/w, and re- 
programming algorithms 


• limited amount of RAM for variable storage (i.e., 


stacks, buffers, and other changing parameters) 


• data import capability (i.e., serial line, LAN, floppy 


disk) 


• flash memory for nonvolatile code or data storage 


needs 


• Vpp generator or regulator 


All of the functional blocks in Figure 3 are typical of 
any embedded or reprogrammable system with the ex- 
ception of the Vpp generator. Some microcontrollers 
have on-chip EP/ROM, RAM and a serial port. With 
these devices, implementation of the ISW capability re- 
quires little additional hardware. 


The next section discusses Vpp generation techniques 
and communications design considerations. 


3.1 Vpp Generation 


A static Vpp is needed to reprogram flash memories. 
The Vpp voltage can be generated by: 
1) regulating it down from a higher voltage; 
2) pumping it up from a lower voltage (i.e., charge 


pump, DC/DC converter, etc.); or 
3) designing or specifying the system's 
l2V supply 


with the required ISW tolerances and specifications. 


Sufficient current for reprogramming should be consid- 
ered when selecting your Vpp generation option. Paral- 
lel reprogramming for flash memory in l6-bit or 32-bit 
systems will require, respectively, 2X or 4X additional 
current capability. 


3.1.1 REGULATING 
DOWN 
FROM 
HIGHER 
VOLTAGE 


Vpp is obtained from a higher voltage by using a linear 
regulator. Given the higher voltage, regulation offers 
the least expensive method of generating Vpp. Standard 
three terminal l2V ± 1%, ± 2%, ± 4% non-adjustable 
regulators are available off-the-shelf. Some regulators 
have on/off control built-in. (See Appendix B, Vpp Cir- 
cuit # 1.) All regulators require a minimum input volt- 
age greater than the output voltage. (See Appendix B, 
Vpp Circuit #2 and #3.) 


Vpp can be obtained by pumping Vcc and regulating it 
to the proper voltage. A voltage charge-pump can be 
designed and built by using a charge-pump integrated 
circuit and some discrete components (see Appendix B, 
Vpp Circuit #4) or by using a monolithic DC/DC con- 
verter (see Appendix A, Vpp Circuit #5). 


When using adjustable circuits containing discrete com- 
ponents, design the output voltage so it falls within the 
Vpp specifications for all comers of the components' 


skew (i.e., Vcc ± 10%; Rx ± 1%, Ry ± 1%, etc.). In- 
clude the resistors' temperature coefficientsin the cal- 
culation matrix. Note that each of the various compo- 
nents can add error to the Vpp supply. 


The monolithic DCIDC converter shown in Appendix 
B Circuit # 5 fits into a 24-pin socket. It offers the 
advantages of close temperature tracking and ease of 
implementation. It has also been characterized at tem- 
peratures and meets all the Vpp specifications.Appen- 
dix C contains a partial list of vendors selling DCIDC 
converters. 


Most DCIDG converters are only 50-60% efficient,so 
heat dissipation may be a concern. Some discrete boost 
circuits such as Appendix B, Circuit #4, offer much 
higher efficiency (70-85%). Circuit #4 as shown can 
supply 200 mA. Smallerinductor and capacitor compo- 
nent values and higher frequency boost convertors can 
be used where less power is required. For example, de- 
signs which reprogram one or two flash memories 
simultaneously might use the LTlln. 
(Contact Linear 
Technologies for more information.) 


In all Vpp generation methods, a capacitor on the input 
voltage terminals reduces the output noise voltage. 
Some power supplies (Appendix B, Circuits # 3 and 
# 4) specifya large-valuedcapacitor to decrease the Ef- 
fective Series Resistance (ESR). Place a 0.1 J.LF capaci- 
tor within 0.25 inches of each flash memory's Vpp in- 
put (in addition the one on the Vpp generator's input). 


NOTE: 
The ESR is inversely proportional to the capacitance 
value and the rated working voltage. To lower the 
ESR choose a capacitor with a large capacitance and a 
high working voltage (i.e., above looV). 


3.1.3 ABSOLUTE 
DATA 
PROTECTION- 
Vpp ON/OFF 
CONTROL 


With Vpp below Vcc 
+2V 
or Vcc 
below 2.5V, 
internal circuitry disables the command register and 
eliminates the possibility of inadvertent erasure or 
programming. Switching the Vpp supply off pro- 
vides the secondary benefits of improved power and 
thermal management. 


There are two ways to switch Vpp on and off: 
I) directly switch the Vpp generator's output, or 
2) switch the input voltage supplying the regulation 
circuit. 


Any switching circuit will cause a voltage drop, so 
choose a switch with this drop in mind. Some power 
supplies have asymmetrical tolerances on 12V (i.e. 
+ 5%, -4%). 
Flash memory allows the 12Vsupply to 
drop as low as - 5%. The I% difference between the 
supply and the device requirement allows the switch to 
have an ON resistance voltage drop ofO.12V. Continu- 
ing with this example, assume the system only repro- 
grams one flash memory at a time. The current through 


the switch into the flash is Ipp = 30 mA. Solving for 
the allowableresistance across the switch: R = VII = 
(0.12V)/(30 
mA) = 4 Ohms. See Figure 4. Example 
Voltage Drop Across Switch. Note, one can reduce the 
effectiveRDS(ON) by placing 2 or more FETs in par- 
allel if necessary. 


vpp 
: 
(12V-4") 
- 
(30 mA)(4A) 
Ipp : 
30 mA 
: 
11.4V 
: 
12V-5" 


Figure 4 


Controlling the input voltage of a DCIDC 
convertor 
with a MOSPOWER FET is another straightforward 
approach. (See Appendix B, Circuit #5.) Choose the 
FET switch carefully. It should have a very low on-re- 
sistance to minimize the voltage divider effect of the 
converter and FET switch. If the voltage across the 
FET switch is too high, the converter will not have the 
proper input voltage to meet its specifications. Always 
design the switching circuit with sufficient margin to 
maximum Vpp and Vcc load currents. 


3.1.4 WRITES 
AND READS 
DURING 
Vpp 
TRANSITIONS 


After switching Vpp off, the CPU can read from the 
flash memory without waiting for the capacitors on 
Vpp to bleed off. To do this, write the Read Memory 
command prior to issuing the Vpp_OFF 
instruction. 


Alternatively, the device resets automatically to read 
mode when Vpp drops below VCC +2V. 


Raising Vpp to 12Venablesthe command register. You 
must wait 100 ns after Vpp achieves its steady state 
value before writing to the command register. Remem- 
ber that the steady state Vpp settling time depends on 
both the power supply slew rate and the capacitive load 
on the Vpp bus. 


3.1.5 OTHER 
Vpp CONSIDERATIONS 


The Vpp pin is an MOS input which can be damaged 
by electrostatic discharge (ESD). In OBP applications, 
an external power source supplies Vpp and then is re- 
moved. Electrostatic charge can build up on the float- 
ing Vpp pin. You can solve this problem by one of two 
means: I) tie the pin to Vcc through a diode and pull- 
up resistor (Figure 5a) or through a resistor to ground 
(Figure 5b). With either approach use a 10KO or larg- 
er resistor to minimize Vpp power consumption. 


vPPPln~vcc 


e 1 
R = lOkn 
vpp 


292046-7 


8. Vpp Tied to Vcc for OBP 


vPPPln~vpp 


eX -l 
292046-8 


b. Vpp Tied to Ground 


NOTE: 
Typically EPROMs require Vpp to be within one di- 
ode drop of Vcc for optimal standby power consump- 
tion. Either approach can be used with the flash mem- 
ory. 


ISW applications do not require this ESD protection as 
most regulators and charge pumps contain a voltage 
divider on the output stage. A divider provides a resis- 
tive path to ground even with the supply turned off. 
(Note: check the schematics of the Vpp supply chosen.) 
However, if you directly switch the Vpp supply, add 
the resistor to ground; the switch isolates the Vpp pin 
and allows charge to build up. 


You should layout 
Vpp circuitry and traces for high 


frequency operation since programming power charac- 
teristics exhibit an AC current component. Use the fol- 
lowing standard power supply design rules: 


• Keep leads as short as possible and use a single 


ground point or ground plane (a ground plane elimi- 
nates problems). 


• Locate the resistor network (or a regulator) as close 


as possible to the adjustment pin to minimize noise 
pick-up in the feedback loop. The resistor divider 
network should also be as short as possible to mini- 
mize line loss. 


• Keep all high current loops to a minimum length 


using copper connections that are as wide as possi- 
ble. (This will decrease the inductive impedance 
which otherwise causes noise spikes.) 
• Place the voltage regulator as close to the flash 


memory as practical to avoid an output ground 
loop. Excessive lead length results in an error volt- 
age across the distributed line resistance. 


• Separate the input capacitor return from the regula- 


tor load return line. This eliminates an input ground 
loop, which could result in excessive output ripple. 


3.2 Communications-Getting 
Data to 


and from the Flash Memory 


The flash memory does not care about the origin of the 
data to be programmed. The data could be downloaded 
from a serial link, parallel link, disk drive, or generated 
locally as in data accumulation applications. 


While most systems communicate via serial link, send- 
ing a font to a printer's flash memory is an example of a 
parallel interface. In either format, designers must de- 
cide whether or not to buffer the incoming data. Error- 
free serial protocols will require buffering for recon- 
struction of information packets. With equal capacity 
of RAM and flash memory in a system, the download 
time would only be limited by the speed of the commu- 
nication link. 


Both worst case and typical analysis must be done for 
real time download and un-buffered programming. The 
maximum transmission rate is 19.2K baud assuming 
worst case programming times. The time between char- 
acters at 19.2K baud is 520 JLs; the worst case byte 
programming time is approximately 0.5 ms (including 
software overhead). Typical byte programming takes 
16 JLswhich allows for much higher unbuffered trans- 
mission rates. However, a single byte can take up to the 
full 400 JLsspecified time (plus software overhead), so 
you should not base transmission rate on typical pro- 
gramming times. 


Partial buffering or FIFO schemes can also be imple- • 
mented to increase transmission rates. An argument for 
buffering is reduction of interconnect time and costs. 


Covered in this section are the following software re- 
quirements: 
• system integration of ISW 


• reprogramming considerations for single- and multi- 


ple-flash memory based designs. 


4.1 System Integration-Boot 
Code 
Requirements 


Boot code in remote systems should contain various 
ISW-specific procedures in addition to standard initiali- 
zation and diagnostic routines. 


The most dependable boot code for remote version up- 
dates contains some basic communications capability 
and the ISW reprogramming algorithms. Thus, a data- 
link disruption while reprogramming would be recover- 
able. For manufacturing flexibility, this boot memory 
could be an OBP 256K flash memory. 


1. Bootstrap, and reset flash memory; 
2. Check "HOST_INT" 
and "VALID_AP" 
flags: 
If HOST_INT 
is inactive and VALID_AP 
= 4l50H, jump to application start address; 


3. If VALID_AP<>4l50H, 
loop and wait 
for host (the link probably went down during 
update); 


4. When "HOST_INT" 
is active, vector to 
host interaction code. 


(See next section.) 


An alternative to storing these routines in a separate 
boot device is storing them in the flash memory con- 
taining the program code. Prior to erasure, the CPU 
would transfer the ISW routines to system RAM and 
execute from there. This type of approach is suitable for 
battery-operated 
equipment or systems with back-up 
power supplies. 


The communication link could be disrupted during re- 
programming, leaving the device in an unknown config- 
uration. Therefore, the boot code should reset the flash 
memory and check two ISW flags. The following sec- 
tion discusses the flag check concept. 


After resetting the flash memories and initializing other 
system components, the CPU should check the com- 
munications link for a host interrupt. We will call this 
the HOST_INT 
flag. Had the communication link 
gone down prior to completion of downloading, then 
the host would have to re-establish contact to complete 
the task. 


Assuming no HOST_I NT request has been made, the 
boot protocol then checks a data sequence in the flash 
memory signifying a valid application (VALID-AP). 
You program this sequence into the memory array after 
confirmation of a successful download. If a download is 
interrupted midway through erasure or programming, 
then the VALID_AP 
flag locations will not contain 
the VALID_AP 
code. On the next system bootstrap 
the CPU recognizes this and holds up system boot until 
valid code is programmed. In Figure 6 an example flag 
protocol uses the VALID_AP 
sequence of 4l50H 


(ASCII codes for "AP"). 


4.2 Communication 
Protocols and 
Flash Memory ISW 


The remote download communications protocol must 
guarantee accurate transmission of flash memory in- 


structions and program code. This protocol can be as 
simple as a read-back technique or as complex as an 
error-free transmission protocol. (See Figure 7 for pos- 
sible system-level flash memory instructions.) 


A simple read-back technique optimizes download for 
boot code memory needs and ease of implementation. 
The embedded CPU echoes the flash memory instruc- 
tion (i.e., Erase or Program) to the host, and waits for a 
confrrmation prior to execution. After programming 
the update, the remote system checks the update by 
transmitting it back to the host for confrrmation. The 
remote system then programs the VALID_AP 
se- 
quence. Note that 
programming 
and reading back 


64 Kbytes at 19.2K baud takes about 0.57 minutes per 
direction: 


(65,536 
bytes) 
• (10 bits/byte) 
• (1 sec/19.2 
Kbits) 
• 


(1 min/60 
see) = 0.57 minutes. 


Implementing either software- or hardware-based er- 
ror-free communications protocol improves transmis- 
sion efficiency. It eliminates the possibility of errant 
data being programmed if not buffered and checked, 
and optimizes the download process for transmission 
time. Additionally, file compression and decompression 
routines can improve the transmission rate. 


General ISW Instructions 
Include: 


STATUS CHECK 
INITIATE REPROGRAMMING 
MOVE ISW ROUTINES FROM FLASH MEMORY TO RAM 
(If not resident In separate boot memory) 


Data accumulation-specific 
commands Include: 


RETRIEVE DATA 
ERASE FLASH MEMORY 


Figure 
7. Sample 
System-Level 
ISW Instruction 
Set 


~ne n~st sn~ula request a status update from the re- 
mote system prior to sending a reprogramming instruc- 
tion. Depending on the response, the host may break 
the link and reconnect later, or it may send an erasure 
or data-upload command. This type of handshaking is 
necessary when system downtime for reprogramming 
might not be acceptable. An example of this is an auto- 
mated factory where robots handle caustic chemicals. 


4.3 
Data Accumulation 
Software 
Techniques 


Data can be accumulated in a remote environment with 
flash memory and then uploaded to a host computer for 
manipulation. 
You can adapt various standard data- 


logging techniques for use with flash memory. With 
any technique, you determine the next available memo- 
ry location by reading for erased data (OFFH). This 
address would only be located once on system boot- 
strap and then recalled from RAM and incremented as 
needed. 


Given a repeating data string of known length and 
composition, program start and stop codes at either end 
of the string. Do not pick ooH or OFFH data for these 
codes because they are used during erasure. The start 
and stop codes enable the CPU to differentiate between 
available memory for logging and logged data equal to 
ooH or OFFH. 


For non-regular data input, you can address this same 
issue by programming the logged data followed by the 
variable identifier. Again, do not pick ooH or OFFH 
data for the variable identifiers. 


With any technique, the host computer separates and 
manipulates the data after the uploading operation. 


Intel's ETOX flash memories provide a cost-effective 
updatable, non-volatile code storage medium. The reli- 
ability and operation of the device is based on the use of 
specified erasure and programming algorithms. 


Intel offers reprogramming software drivers to make it 
easy for you to design and implement flash memory 
applications. The software is designed around the CPU- 
family architectures and requires minimal modification 
to define your system parameters. For example, you 
supply the memory width (8-bit, 16-bit, or 32-bit), sys- 
tem timing, and a subroutine for control of Vpp. 


If you prefer to implement the algorithms yourself, they 
are outlined in the device data sheets. Command regis- 
ter instructions required for the various operations are 
included in the data sheet flow charts. 


The following sections describe both single-device and 
multiple-device parallel reprogramming 
implementa- 
tions. 


Flash memories chip-erase all bits in the array in paral- 
lel. The erase time depends on the Vpp voltage level 
(11.4V-12.6V), 
temperature, 
and number 
of erase/ 


write cycles on the part. See the device data sheets for 
specific parametric influences on reprogramming times. 


Note that prior to erasing a flash memory device the 
processormust program all locations to OOH. This equal- 
izes the charge on all memory cells insuring uniform and 
reliable erasure. 


The Quick-Erase algorithm has three different time de- 
lays: 
I) The first is an assumed delay when Vpp first turns 


on. The capacitors on the Vpp bus cause an RC 
ramp. After switching on Vpp, the delay required is 
proportional to the number of flash memory devices 
times 0.1 J-LF/device.Vpp must reach its final value 
100 ns before the CPU writes to the command regis- 
ter. Systems that hardwire Vpp to the device can 
eliminate this delay. 
2) The second delay is the "Time Out TEW" function, 


where TEW is the erase timing width. The function 
occurs after writing the erase command (the second 
time) and before writing the erase-verify command. 
The erase-verify command or the integrated stop 
timer internally stops erasure. 
TEW for ETOX II flash memories is a minimum of 
10 ms. This delay can be either software or hard- 
ware controlled. Either way, the minimum nature of 
the timing specification allows for interrupt-driven 
timeout routines. Should the interrupt 
latency be 


longer than the minimum delay specification, the 
stop timer halts erasure. 


3) The third delay in the erase algorithm is a 6 J-Lstime 


out between writing the erase verify command and 
reading for OFFH. During this delay, the internal 
voltages of the memory array are changing from the 


• 


erase levels to the verify levels. A read attempt prior 
to waiting 6 j.Lswill give false data-it 
will appear 


that the chip does not erase. Repeatedly trying to 
erase verify the device without waiting 6 j.Lswill 
cause over-erasure. This delay is short enough that 
it is best handled with software timing. Again, note 
that the delay specification is a minimum. 


In applications containing more than one flash memo- 
ry, you can erase each device serially or you can reduce 
total erase time by implementing a parallel erase algo- 
rithm.7 You save time by erasing all devices at the same 
time. However, since flash memories may erase at dif- 
ferent rates, you must verify each device separately. 
This can be done in a word-wise fashion with the com- 
mand register Reset command and a special masking 
algorithm. 


Take for example the case of two-device (parallel) era- 
sure. The CPU first writes the data word erase com- 
mand 2020h twice in succession. This starts erasure. 
After 10 ms, the CPU writes the data word verify com- 
mand AOAOhto stop erasure and setup erase verifica- 


intel~ 


tion. If both bytes are erased at the given address, then 
the CPU increments the address (by 2) and then writes 
the verify command AOAOh again. If neither byte is 
erased, then the CPU issues the erase sequence again 
without incrementing the address. 


Suppose at the given address only the low byte verifies 
FFh data? Could the whole chip be erased? The answer 
is yes. Rather than check the rest of the low byte ad- 
dresses independently of the high byte, simply use the 
reset command to mask the low byte from erasure and 
erase verification on the next erase loop. In this exam- 
ple the erase command would be 20FFh and the verify 
command would be AOFFh. Once the high byte verifies 
at that address, the CPU modifies the co=and 
back 
to the default 2020h and AOAOh, increments the ad- 
dress by 2, and writes the verify co=and 
to the next 
address. 


See Figure 8 for a conceptual view of the parallel erase 
flow chart and Appendix D for the detailed version. 
These flow charts are for 16-bit systems and can be 
expanded for 32-bit designs. 


RAISE Vpp 


PROGRAt.4 ALL DEVICES TO OOh 


TIt.4E OUT 


[ 


VERIFY 
COt.4t.4AND 


BOTH DEVICES ERASED ....!!.- t.4ASK· 


I 


HI-OR 
LO-BYTE 


Y 
COt.4t.4ANDS 


N 
LAST ADDRESS 
LAST PULSE 
~ 


I Y 
I Y 
DONE 
ERROR 


• YOU t.4ASK THE DEVICE BY SUBSTITUTING A RESET COt.4t.4AND 


fOR THE ERASE a: VERIFY COt.4t.4ANDS.THAT WAY THE 
ERASED BYTE IDLES THROUGH THE NEXT ERASE LOOP. 
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Flash memories program with a modified version of the 
Quick-Pulse 
Programming 
algorithm 
used for U.V. 


EPROMs. It is an optimized closed-loop flow consist- 
ing of IO jJ.sprogram pulses followed by byte verifica- 
tion. Most bytes verify after the first pulse, although 
some may require more passes through the pulse/verify 
loop. As with U.V. EPROMs, this algorithm guaran- 
tees a minimum of ten years data retention. See the 
device data sheets for more details on the programming 
algorithm. 


Algorithm 
Timing Delays 


The Quick-Pulse Programming algorithm has three dif- 
ferent time delays: 
e The first and third-Vpp 
set-up and verify set-up 
delays-are 
the same as discussed in the erasure sec- 
tion. In this case the third delay is for the transition 
between writing the Program Verify command and 
reading for valid data. 


e The second delay is the "Time Out IO jJ.s"function, 


which occurs after writing the data and before writ- 
ing the program-verify command. This write com- 
mand internally stops programming. The section en- 
titled "Pulse Width Timing Techniques" gives 86- 
family assembly code for generating a IO jJ.stimer 
routine. 


High Performance Parallel Device Programming 


Software for word- or double-word programming can 
be written in two different manners. The first method 
offers simplicity of design and minimizes software over- 
head by using a byte programming routine on each de- 
vice independently. Here you increment the address by 
2 or 4 when addressing I of 2 or 4 devices, respectively. 
The second method offers higher performance by pro- 
gramming the word or double-word data in parallel. 
This method manipulates 
the command register in- 


structions for independent byte control. See Figure 9 
for conceptual 
2-device parallel 
programming 
flow 


chart and Appendix E for the detailed version. 
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'You mask the device by substituting a Reset command for the Program and Verify commands. That way, the pro- 
grammed bytes do not get further programmed on subsequent pulses. 
• 


NOTE: 
Word 
or double-word 
programming 
assumes 
2 or 4 
8-bit flash memory 
devices. 


Parallel 
Programming 
Algorithm 
Summary: 


• 
Decreases 
programming 
time 
by 
programming 
2 
flash memories 
(16 bits) in parallel. 
The 
algorithm 
can be expanded 
for 32-bit systems. 


• 
Eliminates 
tracking 
of high/low 
byte addresses 
and 
respective 
number 
of program 
pulses 
by directing 
the 
CPU 
to write 
data-words 
(l6-bit) 
to the com- 
mand 
register. 


• 
Maintains 
word 
write 
and 
word 
read 
operations. 
Should 
a byte on one device program 
prior to a byte 
on the other, 
the CPU continues 
to write word-com- 
mands 
to both 
devices. 
However, 
it deselects 
the 
verified 
byte with software 
commands. 
An alterna- 
tive is to independently 
program 
high and low bytes 
using hardware 
select capability. 


Software 
or hardware 
methods 
can be used to generate 
the timing 
required 
for erasure 
and programming. 
With 
either 
method 
you should 
use· an in-circuit 
emulator 
(ICETM) 
and 
an oscilloscope 
to verify 
proper 
timing. 
Also remove 
the flash memory 
device from the system 
during 
initial 
algorithm 
testing. 


Software 
loops are easily constructed 
using a number 
of 
techniques. 
Timing 
loops need to be done in assembly 
language 
so that 
the 
number 
of clock 
cycles 
can 
be 
obtained 
from the instructions. 


In order 
to calculate 
a delay loop three things are need- 
ed- 


1) processor 
clock speed, 


2) clock cycles per instruction, 
and 


3) the duration 
of the delay loop. 


As an example, 
the 8OC186 divides 
the input 
clock by 
2. With 
a 20 MHz 
input 
clock the processor's 
internal 
clock runs at 10 MHz. 
This translates 
to a 100 ns cycle 
time. 
Delays 
can be made 
by loading 
the CX register 
with 
a count 
and 
using 
the 
LOOP 
instruction. 
The 
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LOOP 
instruction 
takes 
16 clock cycles to execute 
per 
pass. 
It decrements 
the CX register 
on each 
pass and 
jumps 
to the specified 
operand 
until 
CX equals 
zero. 


When 
writing 
a delay loop consider 
all instructions 
be- 
tween 
the 
start 
and 
end 
of the 
delay. 
If a macro 
is 


written 
that 
delays 
10 /Ls, add the clock 
cycles for all 
instructions 
in the macro. 


Here is an example 
of a 10 /Ls delay and the calculation 
of the constant 
required 
for a 10 MHz 
8OC186. 


WAIT_IO 
/Ls: 


push cx 
mov cX,DELA Y 
loop $ 
pop cx 


;10 clock cycles 
;4 clock cycles 
;see calculation 
;10 clock cycles 


10 /Ls/ cycle time 
10 /Ls/loo 
ns 


100 cycles 


2. Loop Instruction 
= 100- 24 cycles 
= 76 cycles 


= 76 
= (15 X [DELAY -II + 5) 


Many microcontrollers 
and some microprocessors 
have 


on-chip 
timers. 
At higher 
input 
clock 
speeds 
these in- 
ternal 
timers 
have a resolution 
of 1 /Ls or better. 
The 


timers 
are loaded 
with a count 
and then 
enabled. 
The 


timer 
starts 
counting 
and when it reaches 
the terminal 


count a bit is set. The CPU executes 
a polling 
algorithm 
that checks the timer status. 
Alternatively, 
a timer-con- 
trolled 
interrupt 
can be used. After 
the timer 
has been 


set and 
the 
interrupt 
enabled, 
the 
CPU 
can 
be pro- 


grammed 
to wait in idle mode or it could continue 
exe- 


cuting 
until the timed 
interrupt. 
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figuring the timer value, because the time seen by the 
part will be the programmed delay plus the minmum 
interrupt latency time. 


The 8OCl86 has three l6-bit timers on-chip. Timer #2 
can be a prescaler for the other two timers, which ex- 
tends timers #0 and # 1 range out to 2A32. By using 
two timers, 10 JLs pulses and 10 ms pulses can be easily 
achieved. 


External timers can take many forms. One popular ex- 
ample is the 82C54 (CHMOS Programmable Interval 
Timer) which has three l6-bit timers on-chip. One tim- 
er can be used as a prescaler for the others so that a 
count of2A32 can be achieved as with the 8OCl86 inter- 
nal timers. 


5.0 SYSTEM 
DESIGN 
EXAMPLE: 
AN 80C186 
DESIGN 


A general purpose controller and/or 
data acquisition 


system was built to demonstrate 
86-based ISW. The 


8OC186 CPU 
drives 
the 
system, 
which 
contains 
16 Kbytes of EPROM 
(two 27C64's), 64 Kbytes of 
flash memory (two 28F256A's), 64 Kbytes of SRAM 
(two 32K x 8's) three 8-bit ports (82C55A), one serial 
port (82510), and a 5V to l2.0V DC/DC 
converter. 


Three 74HC573's demultiplex the address/data 
bus 
and latch the byte high enable line (BHE#) 
and the 


status 
lines 
(if 
needed). 
Two 
data 
transceivers 


(74HC245) simulate the worst case data path for a sys- 
tem requiring added drive capability. If the transceivers 
are not needed they can be replaced with wired headers. 
See Appendix F for detailed schematics parts list, and 
changes for the 28F512 or 28FOIO. 


The 8OC186reset (output) drives the reset input on the 
82510, 82C55A, and the OE# 
inputs on the address 


latches and data transceivers. The reset line goes inac- 
tive 5 clock cycles before the first code fetch. Also, the 
CPU's write signal is split into byte-write-high and 
byte-write-low to allow for byte or word writes. 


The 80Cl86 has on-chip memory and peripheral chip 
selects. Two of the memory chip selects are dedicated. 
One is the Upper Chip Select (DCS #, dedicated for the 
boot area) and the second is the Lower Chip Select 
(LCS #, for the interrupt 
vector table area). See the 
memory map in Figure 10. 


Boot 
flash 
memory 
algo's, 
etc. 


ucs 
FCOOOH 


Version 
update 
code, 


Application 
Data Accumulation 
storage, 


etc. 


MCSO 
4oo00H 
RAM 
Vector 
table, 
Stack, 


Buffers, 
etc. 


LCS 
0000 


The permanent code was placed in an EPROM in the 
UCS memory segment; this code includes routines for 
hardware initialization, communications, data upload- 
ing and downloading, erasure and programming algo- 
rithms, I/O drivers, ASCII to binary conversion tables, 
etc. This would be useful for systems reconfigured for 
different communication protocols as the last step prior 
to shipment. 


Code and constants that might change are placed in the 
64 Kbytes of flash memory. Application examples in- 
clude operating systems, code for rapidly advancing 
biomedical technologies such as blood test software, en- 
gine-control code and parameters, character fonts for 5 
printers, postage rates, etc. The RAM is used for the 
interrupt table, stack, variable data storage, and buff- 
ers. 


The three 8-bit ports on the 82C55A peripheral con- 
troller can be used for control and/or data acquisition. 
It powers-up with all port pins high. Similarly, all port 
pins go high after warm resets as well. Because the pins 
are high after a power-up/reset, 
an open collector in- 
vertor was used to control the MOSPOWER 
switch 


which in turn controls Vpp. You must drive the FET 
switch to one rail or the other to guarantee its low on- 
resistance. Vpp is turned off during power-up or reset 
as a hardware write protection solution. The DC/DC 
converter supplies Vpp. 


The 82510 is a flexible single channel CHMOS UART 
offering high integration. The device off-loads the sys- 
tem and CPU of many tasks associated with asynchro- 
nous serial communications. 


The part can be used as a basic serial port for the host 
serial link, or can be configured to support high speed 
modem applications. 
For more information 
on the 


82510 see the 82510 data sheet and AP-401 "Designing 
with the 82510 Asynchronous Serial Controller". 


Software was written to download code and data pa- 
rameters (code updates) from a PC to the demo board 
through the PC's COMI port (serial port). The system 
also can upload data (remote data acquisition) to the 
PC via the same link. 


Once the download 
code and data has been pro- 
grammed it can not be lost, even if power should fail. 
This is because Intel's ETOX II flash memory technol- 
ogy is based on EPROM technology and does not need 
power to retain data. 


The end result: rugged, solid state, low power nonvola- 
tile storage. 


intel~ 


Intel's flash memories otTer designers cost-effective al- 
ternatives for remote version updates or for reliable 
data accumulation in the field or factory. Designers will 
also benefit from time savings in any kind of code de- 
velopment-no 
15 minute waits for U.V. EPROM era- 


sure. 


This application note covers the basics of in-system 
writing to flash memories and can be used as a check 
list for systems other than the 80C186 design shown. 
The basic concepts remain the same: a CPU controls 
the reprogramming operations; a 12V supply must be 
applied to the flash memory for erasure and program- 
ming; and a communications link connects the host to 
the remote system and supplies the code to be pro- 
grammed. 


APPENDIX 
A 


ON-BOARD 
PROGRAMMING 
DESIGN 
CONSIDERATIONS 


• 


On-board 
programming I (OBP) 
with 
Intel's 
flash 
memory provides designers with cost reduction capabil- 
ities for alterable code storage designs. When used in 
conjunction with on-board programming, flash memo- 
ry presents opportunities 
for savings in two areas: 
greater testability in the factory, which translates to 
improved outgoing quality and reduced return rate; and 
quicker, more reliable field updates, which translates to 
decreased product support cost. 
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This appendix: 
• outlines the design considerations associated with 


on-board programming, and the improvements af- 
forded by Intel's flash memory; 


• offers 
guidelines 
for 
converting 
current 
64K 


EPROM OBP designs; 


• designs an 8-bit system for on-board programming; 
• suggests some 16-bit flash design considerations; 


and offers information on OBP equipment and ven- 
dors. 


1. Withon-board programming,non-volatilememory is programmed whilesocketed or soldered on the applicationboard, 
rather than before hand as a discrete component. This programmingmethod is also called in-moduleor in-circuitprogram- 
ming,and has been practiced by some majorcorporationssince 1981. See sidebar on followingpages for more information 
on U.V. EPROM 
OSP usage. 


HOST APPLICATION 
(Printer Shown Here) 


On-Board Programming Manufacturing Example-A 
printer is customized via OBP for international markets: 


I. printer assembly completed, diagnostics code programmed and tested, and unit stored in inventory; 2. order 
arrives for printer with foreign language font; 3. diagnostics code flash-erased, and desired font programmed; 4. 
printer ships to customer. 


INTEL'S FLASH MEMORY-DESIGNED 
TO MEET YOUR OBP NEEDS 


Intel's flash memory simplifies OBP code updates by 
offering designers the command register architecture. 
As described in section 2.2, this architecture offers the 
full reliability 
of EPROM 
off-board 
programming 


without the hassles of elevating Vcc. 


5 Volt Vcc Erasure and Programming 
Verification 


Unlike EPROM OBP, flash memory enables Vcc to 
remain at 5.QVthroughout all operations. Internal cir- 
cuitry derives the erasure and programming verification 
levels from the voltage on Vpp rather than from Vcc. 
These verify modes enable use of a single Vcc bus for 
the entire board, as opposed to the two buses needed for 
U.V. EPROM 
OBP. (See sidebar entitled EPROM 


OBP). 


EPROM OBP has been a proven manufacturing technique since 1981. Ingenuity and clever circuit design have 
enabled manufacturers to overcome the hurdles associated with OBP and enjoy the benefits. 


In many cases, Intel's flash memory simplifies today's solutions and offers new capabilities to advance the state of 
OBP technology. The following paragraphs outline the hurdles and a few of the solutions in use today. 


EPROMs require program verification at an elevated Vcc to insure long·term data retention. PROM program- 
mers easily accommodate this requirement, and it is generally invisible to the end·user. 
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REPLACING 
CURRENT 
EPROM OSP 
DESIGNS 
WITH 
FLASH MEMORY 


A slight hardware modification is required to adapt 
most of the current EPROM OBP designs for use with 
Intel's 
flash memory. Simply convert the EPROM 
memory sites from 28 to 32 pins. All other board-de- 
sign cirteria used for EPROM 
OBP apply to flash 
memory as well. (For discussions of these criteria see 
section entitled New OBP Designs). 


Standard EPROM OBP requires the board designer to 
bus PGM # to the edge connector. With flash memo- 
ries' command register architecture, this same trace en- 
ables electrical erasure and programming, only now the 
line is called Write Enable (WE#). 
The timing for 
WE# is similar to that of read accesses, although that 
is handled via software changes. 


Another 
potential hardware change is on the board 
programmer side of the design-the 
Vpp supply. Many 
EPROMs program with 12.5-13.0V Vpp supplies. In- 
tel's ETOX II flash memory requires 11.4-12.6V Vpp. 
This change should not be an issue since the Vpp sup- 
ply on many board programmers is programmable. 


Mixed memory systems containing both conventional 
U.V. EPROM and flash memories require special con- 
sideration. This type of memory design requires separa- 
tion of the Chip Enable (CE#) 
control lines between 
the EPROM and flash devices to allow for independent 
reprogramming 
control and access. The PGM # and 


WE# 
lines can be common if the board programmer 


can give the appropriate timings to either type of de- 
vice. 


Manufacturers who program EPROMs on-board today 
will need new board-programmer 
software to take ad- 


vantage of flash memory's feature set, specifically soft- 
ware for the Quick-Erase and Quick-Pulse Program- 
ming algorithms. 


Benefits of Converting 
Your EPROM OBP 
Design to Flash 


The most pressing reason to convert from a standard 
EPROM to flash memory is the total cost savings. To 
appreciate this, you must consider your way of doing 
business at the board and system levels-from 
the fac- 


tory to installation and repair in the field. In the facto- 
ry, boards can be tested with a diagnostics program in 
the flash memory and then erased and reconfigured for 
shipment in the same step. Improved testing will de- 
crease the probability of field failures and costly cus- 
tomer returns. Simplified test and rewor,lcmethods will 
decrease your inventory holding costs. Also, if in the 
process of converting to flash memory you include the 
ability to OBP via a cable-connector, service calls for 
code updates will be quicker, more reliable, and cost 
less money. Your serviceman would simply connect the 
programming equipment to the system without disman- 
tling it to remove the EPROMs. (See section entitled 
The SystemlBoard-Programmer 
HIW 
Connection for 


details.) 


With OBP, the EPROM board-programmer 
handles the elevated-Vcc requirement easily as well. However, 


when Vcc is greater than SV. logic devices populating the same board may draw excessive current and not 
operate predictably. 


One solution to this issue involves running separate Vcc traces to the board's edge connector-<>ne for EPROM 
programming, and one for powering up the rest of the board. 


A second consideration when designing for EPROM OBP bas been accessing manufacturer and device codes. 


The identifier mode requires forcing A9 to 12V. This translates to adding extra isolation, which implies the 
increased costs of buffers and extra board space. 


Design Considerations 


As with EPROM in-circuit programming, flash memo- 
ry board programming requires the use of a board-pro- 
grammer. Unlike U.V. erasure for standard EPROM 
OBP, electrical erasure enables flash memory OBP 
without removing the board from the system. 


We will look at designing a board that is to remain pow- 
ered-up in the system during erasure and reprogram- 
ming. The key concept is to design the board in such a 
way that the programmer can take control of the system 
during code updates. The implementation of such a de- 
sign is straightforward, easy, and suited to automated 
production assembly. 


The board-programmer 
needs to take control of the 


system's address bus, data bus, control lines, etc. to 
update the code without damaging the system. (See 
Figure 
2. System to Board-Programmer 
Interface.) 


Taking control simply means isolating the rest of the 
system from these lines. 


Various methods of isolating the memory from the sys- 
tem include using tristate buffers, latches, or even the 
capabilities designed into microprocessors (IJ-P)and mi- 
crocontrollers (IJ-C).For example, Intel's 86-based IJ-P 
family has HLDIHLDA 
signals that were set-up for 


multiprocessor system designs where bus control is a 
major concern. The HLD signal, when acknowledged, 
tristates the address, data, and control lines. Although 
not designed for multiprocessor environments, Intel's 
MCS@-51 and MCS-96 microcontroller families have 
Reset capabilities to help simplify this same task. 


One issue to be aware of when using a CPU's reset 
control function is that it may switch from the reset to 
active condition at a non-standard logic level. This only 
presents a problem if the address/data 
buffer takes 


longer to activate than the CPU, and the CPU attempts 
to fetch code from a memory device isolated from it. 


One approach to insure successful programming take- 
over (i.e. without bus contention) is to have the board- 
programmer's 
lines in a high impedance state during 


connection to the system. Once connection to the sys- 
tem has been secured, the serviceman could hit a button 
on the board-programmer to start the system takeover 
procedure. Then when total' control has been estab- 
lished, the programmer would commence with erasure 
and reprogramming. 


Aside from the flash device's isolation from the system, 
various 
CPU 
control 
lines 
(MEMRD#, 
WE#, 


PSEN #, etc.) may need isolation as well. If active dur- 
ing Reset, these lines may put the CPU into an unspeci- 
fied state. When designing a board for OBP, check the 
IJ-C/IJ-Pdata sheets carefully for any special reset con- 
ditions. 


Printed Circuit Board Guidelines for 
Vcc and Vpp 


Programming conventional EPROM and flash memo- 
ries takes 30 mA of current on VCC and Vpp, due to 
the nature of hot-electron injection. Most of the charge 
transfers to the memory cell's floating gate in a short 
current spike during the first pulse. You should design 
both the Vcc and Vpp traces with A.C. current spikes 
in mind. Wherever possible, limit the inductance by 
widening the two traces. Bypass capacitors (0.1 IJ-F) 
should be placed as close as possible to the memory 
device's Vcc and GND pins, as well as the devices Vpp 
and GND pins. The capacitor on Vcc decreases the 
power supply droop. The capacitor on Vpp supplies 
added charge, and filters and protects the memory from 
high frequency over-voltage spikes2. 


2. For a complete discussion of electrical noise, groundS,power supplydistributionand decouplingsee Ap-74-High Speed 
MemorySystem Design Using the 2147H, and AP-125-Designing MicrocontrollerSystems for ElectricallyNoisy Environ- 
ments. 


EPROM· •• 
(•••• 
4) 


Some users ofOBP get around this isaueby~ 
iUJU1lQMt_ 
a~ 
algorithm. However, this 
practice compromises the device's reliability. and $hQuJdJlOt be ~ 


A better solution than ignoring the identifier is to dl.oose' a ~ 
ErR-OM vendor and program with its 
algorithm only. 


One subtle concern with EPROM OBP that ~. 
oftea ovorJookis U.V. board cruure. 
-+ U.v. EPROM board cruure 
requires removal of the ~. 
ftom Its host fl.ystem. Th.is incurs the hidden 
costs of labor, lower yields due to handling, and tlle relial>iti.tYrisIu; of dismantling a system. Flash memory 
deQrease8these costs by enabling a greater degree!of factory llUtomation, and increases the flexibility afforded by 
OBP. 
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NOTE: 
5 


During 
normal 
system 
read operation, 
all interface 
traces 
are left open-circuited. 
Some 
of the lines have 
pull-downs 
or 
weak 
pull-ups 
to insure proper 
device 
operation . 


•.•• Special U.V. board erasers must be purchtied, 
at sipificant 
costs and Withlimited throughput. A low-end 
U.V. bulb costs $75-$100 each. AU V. board eraser syStem could cost upwards or 110,000. with recurring costs 
of light bulbs and energy. Thus, the cost ofiJ.V. erasure IS otbm ~ted. 


•.•• Although portable board 
pt'OII'8lD1Ilel 
are CiOIntIIeI'ciaI 
available, V.V. tights by nature are not very 
rugged, and are not suited for out-of.faCtory code updates. 
1"bis oomplicatts field service. 


•.•• Erasure can be easily contrOlted in a lab ectVi.t'OftftleDt; ~, 
It is not as clear on the manufactunng floor 
which label to remove for V.V. erasure. becalJ8eParls other than ltPllOMs 
have Windows(i.e. BPLD's, micro- 


controllers with embedded BPROM memot'Y. etc.) 


The System/Board-Programmer 
Hardware 
Connection 


In most U.V. EPROM OBP applications, designers use 
the board's edge-connector as the programmer inter- 
face. This approach is the lowest cost solution for stan- 
dard EPROM technology because U.V. erasable devic- 
es require system disassembly for erasure anyway. With 
flash memory, you can eliminate the system disman- 
tling and capitalize on the erase feature by adding a 
cable connector to the board for reprogramming pur- 
poses. The connector should extend from the board 
through the system's chassis, and should be easy to 
reach by a serviceman. 


Various types of cables exist on the market that could 
be used to connect programming equipment to the sys- 
tem. The key design consideration when choosing the 
type of cable is elimination of all transient noise that 
would interfere with the programming or erasure pro- 
cess. 


Three types of noise interference and methods to dimin- 
ish the noise are as follows: 


J. line to line cross-talk (due to board-programmer's 
drivers that drive sharp step functions on adjacent 
address lines); solved with either ribbon cables, hav- 
ing alternate lines grounded, or with braided twisted- 
pairs that have a ground line for each active signal; 
2. progra=er 
line-driver-to-board 
impedance 
mis- 


matches leading to transmission line effects of signal 
reflection, and interference; solved by limiting cable 
length, decreasing programmer switching speed (or 
allowing 
longer 
settling 
time 
between 
address 


switches) or by using matched line drivers on the 
progra=er 
and high impedance buffers on the 
board end, or by using series termination resistors on 
the driving end of the cable (i.e.-board-progra=er 
end, with the exception of the bi-directional data bus 
which needs series resistors at both ends); 
3. rf pick-up in electrically noisy environments; use ei- 


ther shielded cable such as coax, ribbon cable with 
solid copper ground plane, or a new type that has 
recently become available called Flex cable. 


Braided twisted-pair cables when kept under three feet 
in length generally reduce cross-talk to acceptable lev- 
els. This type of cable offers the most cost-effective so- 
lution which works well in most applications. Depend- 
ing on the environment, the progra=er 
and your de- 
sign, you may need a combination of solutions, such as 
braided twisted-pairs with series termination. 


At first all of these alternatives may seem expensive or 
superfluous, but keep in mind that the cost of a single 
cable and programmer 
gets amortized over the total 


number of systems progra=ed. 


An example of an in-circuit reprogrammable controller 
board is an 8OC31, two 28F256A's 
and some glue 


chips. (See Figure 3. for a system block diagram. See 
Appendix A. for a detailed system schematic.)3 The 
important issues for erasure and reprogramming are as 
follows: 


J. the board-programmer must have uncontested access 


and control of the flash memory array; and 
2. the microcontroller must be reset (un-active) during 


the erasure and programming cycles. 


The 8OC31has an active-high reset pin, which tristates 
the address and data bases. Route this line (RESET) to 
the programming connector. Tie the OE# 
pins on the 


low-order address latch (74HCT573), and the PSEN # 
buffer-enable (74HCTI25)4 
together, and route that 


line MEMWRs to another pin on the progra=er-in- 
terface connector. 


During normal system operations when the /LC reads 
program code from the 28F256 devices, the pull-down 
on MEMWR keeps the address latches and PSEN # 
buffer active. During flash memory OBP,. the board- 
progra=er 
drives MEMWR active-high, which dis- 


ables these outputs, and isolates the address bus and 
PSEN # from the programming signals. 


The board-programmer must independently control the 
RESET and MEMWR traces because they disable at 
different VIL values (2.5V for RESET vs a.8V for 
MEMWR). If controlled by the same 5V supply, on 
power-up or after a reset condition the /LCwould try to 
execute code while still isolated from its code source- 
specifically before the address latches and PSEN # 
buffer activate. 


Address 
Decode 
CirCUitry 


This design shows two 28F256A flash memories. Sys- 
tems with more than one memory device typically de- 
code the CPU's high-order address to select a particu- 
lar device. 


3. Note that the flow-throughlatch on the data bus is not needed withthe 80C31, but is drawnas an example for CPU's that 
can not tristate their data bus. 
4. The isolationbufferis requiredon PSEN# in this design because the 80C31 goes into unspecifiedstates when the Reset 
and PSEN# lines are active simultaneously.To avoidany possible problems, bufferPSEN#. 
5. MEMWR= > bus isolationcontrolof PSEN# and the data bus. 
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This is accomplished as illustrated. When Al5 is low, 
the lower 32K bytes are selected. The output of the 
inverter drives the other 28F256A's chip enable. This 
type of memory architecture promotes power savings 
by disabling all memories but the one being addressed. 


To accomplish this two-line memory control architec- 
ture, route the inverter's input Al5 to the 80C31 and to 
the programmer interface connector.s The board-pro- 
grammer controls the inverter's 
output 
enable with 
MEMEN#.9 
The MEMEN# 
line performs the func- 
tion normally performed by CE# 
in component pro- 
gramming. 
When 
driven 
to 
a 
logic 
"I" 
level 
MEMEN # pulls the inverter's output high. This dese- 
lects all memory devices controlled by that I.C. During 
normal read and standby operations, the pull-down on 
MEMEN # keeps the decoder enabled. 


In this design, Vpp and WE# 
are active only during 
reprogramming. At other times, the two inputs would 
be inactive. Simply tie the WE# line to Vcc through a 
pull-up resistor. The pull-up limits the current to the 
board programmer during reprogramming. (Recall that 
WE# is active low.) Flash memories allow Vpp to be at 
12V, Vcc or ground for read operations. This design 
ties Vpp to VCC through a diode and resistor to allow 
for EPROM OBP compatibility. If this option is not 
required, simply tie Vpp to ground through a current- 
limiting pull-down resistor. 


The board-programmer 
should return system-control 
to the host processor in an organized manner. First it 
should lower Vpp from 12Vto 5V, or ground. Then the 
board progra=er 
should place its address and data 


buses into a high impedance state. Next PS2, which 
controls MEMWR should be tristated thus disabling 
the PSEN # / Address latch isolation. Finally the board- 
progra=er 
should switch PSI, which drives the RE- 
SET line to reactivate the /LC, This sequence guaran- 
tees that the /LC will begin operation at a known pro- 
gram code location. 


16-BIT BUS DESIGN 
CONSIDERATIONS 


An example of an On-Board programmable 16-bit sys- 
tem board would be an 80Cl86 microprocessor, two 
28FOIO flash memories, RAM, and some glue chips. 
The basic hardware design considerations would be the 
same as those in the previously discussed 8-bit bus ex- 
ample. 


There are a few issues with 16-bit designs that do not 
arise in 8-bit designs. For the programmer to take con- 
trol of the system, it must tristate and reset the /LP as 
well as tristate the bus buffers and latches. The HOLD 
and RESET lines of Intel's 86-based family of micro- 
processors have been designed with bus isolation in 
mind for use in multiprocessor systems. 


The designer has two options for erasing and program- 
ming the high and low bytes of the flash memory array 
independently. 


1) The designer can route two WE# 
lines to the pro- 
grammer connector-BYTE 
HIGH WE# 
and BYTE 
LOW WE#. 


2) The reprogramming software can follow the masking 
procedure shown in section 4.4. This method allows a 
co=on 
WE# line for the high and low bytes. 


8. Note the lackof isolationbuffersbetween the 80C31's highorder addresses (Port2) and the board-programmerinterface, 
compared to the latch separating the loworder addresses (Port0) and the interface. Inthis design example,we make use of 
the 80C31's abilityto tristate these ports, so no isolationis needed for any of the addresses. The latch on Port 0 is for the 
time-multiplexedaddress/data architecture of this microcontroller,and not specificallyfor isolation. 
9. MEMEN= memoryenable, active low. 
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If you are considering OBP for your next design, and 
have not used on-board programming before, you will 
need to choose a board-programmer 
vendor. Various 


suppliers offer OBP systems; therefore, it is well worth 
it to send out requests for programming support bids. If 
your production volume justifies the purchase of more 
than one board-programmer, 
you may want to negoti- 
ate a non-recurring engineering charge for development 
cost, followed by variable costs for additional units. 


Most vendors offer a variety of basic systems, designed 
to easily adapt to your needs. Systems can be purchased 
that program either single boards serially, or a number 
of boards in parallel. Light-weight OBP equipment de- 
signed for field reprogramming can also be obtained 
from some of the vendors. 


Most companies will work directly with you at the be- 
ginning of your design phase to ensure OBP compati- 
bility. If your design is beyond the definition stage, the 
programmer manufacturer will request a copy of your 
schematics or block diagrams under non-disclosure. 
The vendor has an OBP design specialist that will 
check the design for OBP compatibility. Any potential 
problems will be located and corrected at this early 
stage. 


Every board's architecture is different (i.e., based on 
different 
central 
processing units 
(CPU), 
decoding 
schemes, buffering methodologies, interface connectors, 
and types and densities of memories). Vendors write 
custom software modules for each application. Also, 
the vendor or the board designer typically builds an 
interface jig to connect the board's edge connector to 
the programmer. This choice is often left as a decision 
for the designer. 
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Partial List· of Companies 
Selling 
Board-Programmers 


Following are a few of the companies who offer on- 
board programming solutions today: 


Data I/O Corp. 
Digelec 
Elan Digital Systems 
Oliver Advanced Engineering, Inc. 
Stag Microsystems, Inc. 


'This list is intended for example only, and in no way 
represents all companies that support on-board pro- 
gramming. Intel Corporation assumes no responsibili- 
ty for circuity other than circuitry embodied in an In- 
tel product. No other circuit patent licenses are im- 
plied. 


SUMMARY 
• On-board 
programming 
(OBP) has been around 


since 1981. 


• Designing a board for OBP can be easily done by 


working with a board-programmer 
vendor's OBP- 


design-specialist during the initial design phase. 


• In-circuit alterable code storage can be easily imple- 


mented by using flash memory and it's features. 


• Time and money savings can be realized in a num- 


ber of ways by taking advantage of flash memory 
OBP: 
< > Decreased board costs and improved reliability 


from elimination of EPROM sockets; 


< > Decreased manufacturing costs from elimination 


of board eraser depreciation costs, recurring U.V. 
light bulb and energy expenses; 


< > Decreased inventory expense from simplified test 


and rework methods (one-step diagnostics, era- 
sure, and board configuration); 


< > Decreased 
product 
costs 
based 
on 
decreased 


board-handling loss; 
< > Improved board diagnostics and testability leading 


to higher quality and decreased customer returns; 
and 


< > Quicker, more reliable field code updates. 


APPENDIX 
B 
Vpp GENERATION 
CIRCUITS 


Circuit 
11 I-Regulation 
from a higher 
voltage 


Circuit 
1I2-Regulation 
from a higher 
voltage 


Circuit 
11 3-Regulation 
from a higher 
voltage 


Circuit 
1I4--SV 
to 12V Boost 


Circuit 
1IS-SV 
to 12V Boost 


Circuit 
1I6-Monolithic 
DC/DC 
Convertor 


For 
more 
detailed 
information 
on Vpp generation 
circuits, 
see AP-3S7 
titled 
Power 
Supply 
Solutions 
for Flash 
Memory 
(Order 
Number 
292092). 


Down Conversion 
(From 14.0V-26.0V to 12.00V) 


Vln 
In 
QuI 
Vout 
VCC 
LM2391CT 
Rl 
R3 
On/Off 
Gnd 
Adj 
vpp 
C2 


Enable 


r-V~~t-:'-"1~20;(Rl/R2-~-1)-1 
1 
oJ 


COMPONENTS 


LM2391CT 
Rl = 20Kn, 
1% 
R2 = 180 Kn, 1% 
R3 = 10Kn 
Cl = O.l,...F 
C2 = 100,...F 


COST' 


$0.75 
0.045 
0.045 
0.02 
0.02 
0.15 


$1.03 


NOTES: 
-The 
LM2391 offers an enable pin for added data protection. 
-The 
drop out voltage is 0.6V. 
-R3 
is NOT required if Vpp enable is driven by a CMOS device. 
'Cost 
approximations 
assume 
10,000 piece quantity. 


Down Conversion 
(From 
16.00V-26.00V 
to 12.00V) 


[~~~:~::i~~~~:~~~!:~f~::~~ 


COMPONENTS 


LM-317 
Rl = 1240.,1% 
R2 = 10700.,1% 
Cl = 0.1 /LF 
C2 = 100 /LF 


COST' 


0.40 
0.045 
0.045 
0.02 
0.15 


$0.66 


NOTES: 
LM-317 
requires 
a minimum 
VIN-VOUT 
= 3.0V 
'Cost 
approximations 
assume 
10,000 
piece quantity. 


Down Conversion 
(From 
15.0V-40.0V 
to 12.00V) 


In 
LT1085 
Out 


Voltege Regulator 


AdJ 


COMPONENTS 


LT-l085 
Rl = 1240.,1% 
R2 = 10700., 
1% 
Cl = 10/LF 
C2 = 10 /LF 


COST' 


2.50 
0.045 
0.045 
0.10 
0.10 


$2.79 


NOTES: 
LT-l085 
requires 
a minimum 
VIN-VOUT 
= 1.5V 
'Cost 
approximations 
assume 
10,000 
piece quantity. 


R1 


1% 
C2 


R1 


1% 
C2 
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Vpp 


COMMAND 


COMPONENTS 


LT1072 
A1 = 10.7k, 1% 
A2 = 1.24k, 1% 
A3 = 1k, 5% 
A4 = 120k, 5% 
A5 = 270k,5% 
C1 = 1 ".F 
C2 = 1".F 
C3 = 10".F 
L1 = 150".H 
01 = 2N3904 


COST' 


1.82 
0.045 
0.045 
0.02 
0.02 
0.02 
0.10 
0.10 
0.15 
1.00 
0.10 


$3.42 


Up Conversion 
(From 5V to 12.0V) 


SV 


NOTES: 
Drive Vpp COMMAND 
low to turn on the circuit. 


'Cost 
approximations 
assume 
10,000 
piece quantity. 


Vpp 


OUTPUT 
200mA 
MAX 


VppOUT 
R1 
R2 
Resistor 


Tolerance 


12.0V 
10.7k 
1.24k 
1% 
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Up Conversion 
Circuit 
(From 5.0V to 12.0V) 


5.00v 
vpp Out 
11 
+5v 
v+ 
24 
+5v 
v+ 
14 
Valor 
PM7006 
v- 
10 
ell 
v- 
15 
GND 
GND 
12 
13 


o 
r--- --I 
, 
, 


G: 
: Buzl1A 
, 
,, 
1 
.J 


COMPONENTS 


PM7006 
Cl = 0.1 p.F 
BuzllA 


COST' 


$6.25 
0.05 
2.59 


$8.89 


NOTES: 
1. The capacitor decreases output noise to 140 mV pk-pk. 
2. We added the Buzll A Mospower nFET to enable/disable the converter. This control minimizes power consumption 
which under full load can reach 600 mA. 
3. The voltage drop across the switch is O.lV. Due to this drop the PM7006 will not maintain the Vpp spec with 10% 
fluctuations in Vcc supply. 
'Cost approximations assume 10,000 piece quantity. 


APPENDIX 
C 
LIST* OF DC-DC CONVERTER 
COMPANIES 


AT&T MICROELECTRONICSt 
3000 Skyline Drive 
Mesquite, TX 75149 
Tel: (800) 526-7819 
Fax: (214) 284-2317 


BURR-BROWN 
CORP. t 


P.O. Box 11400 
Tucson, AZ 85734 
Tel: (800) 548-6132 
Fax: (602) 741-3895 


LINEAR TECHNOLOGY 
CORP.~ 
1630 McCarthy Blvd. 
Milpitas, CA 95035 
Tel: (408) 432-1900 
Fax: (408) 434-0507 


MAXIM INTEGRA TED PRODUCTS~ 
120 San Gabriel Drive 
Sunnyvale, CA 94086 
Tel: (408) 737-7600 
Fax: (408) 737-7194 


MOTOROLA INC.~ 
2100 E. Elliot Rd. 
Tempe, AZ 85284 
Tel: (800) 845-6686 


NATIONAL 
SEMICONDUCTOR 
CORP.~ 
Mt. Prospect, IL 60056 
Tel: (800) 628-7364 
Fax: (800) 888-5113 


SHINDENGEN 
AMERICA, INC.t 
2649 Townsgate Rd., Suite 200 
Westlake Village, CA 91361 
Tel: (800) 634-3654 
Fax: (805) 373-3710 


SILICONIX INC.~ 
2201 Laurelwood Rd. 
Santa Clara, CA 95056 
Tel: (800) 554-5565 
Fax: (408) 727-5414 


TOKO AMERICA, INC. t 
1250 Feehanville Drive 
Mount Prospect, IL 60056 
Tel: (708) 297-0070 
Fax: (708) 699-7864 


VALOR ELECTRONICSt 
6275 Nancy Ridge Dr. 
San Diego, CA 92121 
Tel: (619) 458-1471 


°This list is intended for reference only, and in no way represents all companies that support power conversion 
products. Since this industry develops many new solutions each year, Intel recommends that the designer contacts 
the vendors for the latest products. Intel will continue to work with the industry to develop optimum solutions for 
power conversion. Intel Corporation assumes no responsibilities for circuitry other than circuitry embodied in Intel 
products. No other circuit patent licenses are implied. 


APPENDIX 
D 
PARALLEL ERASE FLOW CHART 


INITIALIZE: 


PLSCNT_Hl 
= 0 


PLSCNLLO 
= 0 


FlAG =0 


ADRS 
= 0 


[_COW 
= 2020H 


V_COW 
= ADAOH 


Use Quick-Pulse 
Programming 


algorithm. 


Initialize Variables: 


PLSCNT_HI 
= HI Byte Pulse 


Counter 
PLSCNT _LO 
= Low Byte Pulse 


Counter 
FLAG = Erasure 
Error Flag 


ADRS = Address 
E_COM 
= Erase Command 


V_COM 
= Verify Command 


Erase Set-up Command 


Erase Verify Command 
stops 


erasure. 


When both devices 
at ADRS are 


erased, 
F_DATA 
= FFFFH. 


If not equal, increment 
the pulse 


counter 
and check for last pulse. 


Reset commands 
to default 
(E-COM 
= 2020H, 


V_COM 
=AOAOH) 


before verifying 
next ADRS. 


This subroutine 
reads the data word 


(F_DATA). 
It then masks the HI or 


La Byte of the Erase and Verify 
commands 
from executing 
during 
the next operation. 


CCOW = (CCOW 
OR OOFFH) 
V_COW = (v_cow 
OR OOFFH) 


If the La Byte verifies 
erasure, 
then 
mask- 
the next erase and verify 
commands 
with FFH (Reset). 


If the La Byte does not verify, 
increment 
its pulse counter 
and 
check for max count. FLAG = 1 
denotes 
a La Byte error . 


CCOW = (CCOW 
OR FrOOH) 


V_COW= (V_COW OR FFOOH) 


FLAG = 2 denotes 
a HI Byte error. 


FLAG = 3 denotes 
both HI and La 
Byte errors. 


NOTE: 
-Masking 
can easily 
and efficiently 
be done 
in assembly 
languages. 
Simply 
load word 
registers 
with the incoming 
flash 
data (F_DATA), 
the erase commands 
and the verify commands. 
Then 
manipulate 
the HI or La 
register 
contents. 
• 


APPENDIX 
E 
PARALLEL 
PROGRAMMING 
FLOW CHART 


ADRS = address 
to program 
P_OAT 
= data word to program 


Initialize 
Data Word Variables: 


PLSCNT _HI 
= HI Byte Pulse 
Counter 
PLSCNT _LO 
= LO Byte Pulse 
Counter 
FLAG = Program 
Error Flag 
V_OAT 
= valid data 


P_COM 
= Program 
Command 
V_COM 
= Verify Command 


Program 
Set-up Command 
xx = Address 
don't care 


Initialize: 
PLSCNT _HI 
= 0 
PLSCNT _LO 
= 0 
FLAG = 0 
V_DAT 
= P_DAT 
P_COM 
= 4040H 
V_COM 
= COCOH 


High/Low Byte 
Compare & Mask 
Subroutine 


F_OAT 
= flash memory 
data 


Compare 
flash memory 
data 
to valid data (word compare). 
If not 


equal. check for program 
error 
flag. If flag not set, compare 
High 


and Low Byte in subroutine. 


Check buffer or 110 port for 
more data to program. 


To look at the La Byte, masko 
the HI Byte with 00. 


p_co •••= (p _co ••• OR OOFFH) 
V_OAT = (LOAl 
OR OOFFH) 
LCD'" 
= (v_CO'" 
OR OOFFH) 


If the La Byte Verifies, 
mask 


the La Byte commands 
with 
the reset command 
(FFH). 


If the La Byte does not verify, 
then increment 
its pulse 
counter 
and check for max 
count. FLAG = 1 denotes 
a 
La byte error. 


Repeat the sequence 
for the 
HI Byte. 


p_Co •••= (p _CO'" OR FFOOH) 
LOAl 
= (LOAl 
OR FFOOH) 
LCD'" 
= (LCD 
••• OR FFOOH) 


FLAG = 2 denotes 
a HI Byte 
error. FLAG = 3 denotes 
both 
HI and La Byte errors. FLAG 
= 0 denotes 
no max count 
errors; continue 
with algorithm. 


NOTE: 
°Masking 
can easily 
and efficiently 
be done 
in assembly 
languages. 
Simply 
load word 
registers 
with the incoming 
data 
(F-DAT), 
the program 
commands 
and the verify 
commands. 
Then 
manipulate 
the HI or La register 
contents. • 


APPENDIX 
F 


DETAILED 
SYSTEM SCHEMATICS 
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120 
120 


CEI< 
Vrx;~ 
CEI< 
Vrx; ~ 


Vpp .!... 
Vpp 1- 


....-::2 
A12 
PGMI<~ 
H 


A12 
PGMI< ~ 


All 
All 
e:! 
A1D 
0EI<22 
A1D 
0EI<22 


AS 
~4 
AS 


~ 


AS 
07 
19 
AS 
071 


A7 
D6 
F 
A7 
D6 


A6 
0517 
N; 
05 
r::= 
AS 
D4 
~ 
AS 
D4 
M 
03 
M 
D3 


~ 


1>3 
D2 
[;::= 
1>3 
D2 1 


A2 
01 
A2 
01 


~ 


Al 
DOl 
P 


Al 
DOl 


AO 
[81.) 
AO 
18H) 
GNO~ 
GNO~ 


, 


122 
i32 
122 
i32 


30 A17CE# 
Vrx; 
A17CE# 
Vrx; 


A18 


__ 
30 


A16 


A1S 
WE#~ 
-- 
A1S 
WE#.:!!. 


A14 
~ 
A14 


A13 
Vpp fl-- 
-....; 
A13 
Vpp .!...-- 


A12 


~ 


A12 


All 
OE# 
24 
All 
OE# 24 


A1D 


~ 


A1Q 


AS 
07 
1 
AS 
07 
1 


AS 
D6 
::= 
AS 
D6 


A7 
05 
A7 
05 


A6 
D4 
AS 
D4 


AS 
031 
-- 
AS 
031 
M 
02 
~ 
A. 
D2 


1>3 
01 
1>3 
01 
,. 


A2 
DO 
~ 
A2 
DO 


Al 
[9l) 
Al 
19H) 
AO 
GNO~ 
::::::J 
AO 
GNO~ 


Vpp 


WEHIGH# 


WElOW# 


MeSO# 
• 


E HIGH# 


E lOW# 


S# 


20 
VCCJ' 


20 
VCC.J 
CE# 
CE_ 


1 A,. 


~ 


A,. 


2 
A13 
WE# ~ 
A'3 
WE# E...-- 


A'2 
A'2 
Al1 
OE# 
22 
Al1 
OE# 
22 
21 
AIO 


~ 


AIO 
Ag 
0719 
Ag 
07 
1° 
25 
As 
0618 
f:::5 
As 
06'8 
A7 
0517 
A7 
05 
'7 
4 
Aa 
D. 
16 


~ 


A6 
D. 
'6 
As 
0315 
AS 
03 ,5 


6 
A< 
0213 
A. 
02 
13 
7 
A3 
0, 
A3 
0, 
8 
A2 
Do 11 
t:;! 


A2 
Do " 


9 
A, 
A, 


1 
Ao 
11011 
GNO~ 
AO 
[10Hj 
GNO~ 
- 
- 


RESEn 
35 RESEn 
PA, 
7 
1:27 
CS_ 
Plio 
OE_ 
RO_ 
PAS 
WRLOW_ 
WR_ 
PA, 
PA3 
1 
4:17 
A 
6 A, 
PA2 
4:18 
A<J 
PA, 
PAo 
4 
07 
27 07 
62C55A 
D6 
260. 
{151 
PS7 
25 
05 
Os 
Pile 
04 
0, 
PBs 
03 
31 03 
PB.• 22 
02 
02 
PB3 
01 
0, 
PB2 
DO 
Do 
PB, 
PBO 


PC, 
'0 


26 Vcc 


PC. 
PC, 
PC, 
1 
7 GNO 
PC3 
17 


PC2 
-=- 
PC, 
PCO 


14 
+V 


11 
+V 


DC/DC 
5112.00±5% 


10 
- V 
1161 
GNO 12 


GN013 


1 
IOSC-2] 


7 
GND Vcc 
,4 


14 


VCC+,Y 
3 


1488 
2Y 


[121 
3Y 8 


8 
9 


X2 
X\xD 
6 
1 Vcc 


DTR. 
1:25 
18 CS. 
RTS. 
14 


RESET. 
RESET. 
Vcc 


OE. 
RD. 
RxD. 
13 
31Y 
1A 1 


WE LOW. 
WR' 
CTS. 
2Y 
1489 
~ 
RI. 
3Y 


A3 
24 
A2 
DSR. 
4Y 
1131 
4A 


A2 
A, 
A, 
Ao 
GND 
7 


07 
4 
07 
D_ 
O_ 


Os 
Os 


D_ 
O_ 


03 
03 
14 
02 
02 


0, 
0, 


DCO. 
'2 
Vcc 
lA 
1 
DO 
DO 
31Y 


2Y 
1489 
~~ 
10 
1:45 
5 INT 
8 3Y 
11 4Y 
1141 
4A 
13 


7 GND 
82510 
GND 
[111 
7 
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Jl:2 
Jl:20 


Jl:4 


Jl:3 
Jl :5 
Jl:22 
Jl:6 


Device 
Component 
Pins 
Description 


[1] 
80C186 
68 
16-bit high integration 
CPU 
[2,3,4] 
74HC573 
20 
Latch 
[5,6] 
74HC245 
20 
Transceiver 
[7] 
74HC32 
14 
OR gate 
[8L,8H] 
27C64 
28 
16 Kbyte EPROM 
[9L,9H] 
28F256A 
32 
64 Kbyte flash memory 


[10L,10H] 
32Kx8 
SRAM 
28 
64 Kbyte SRAM 
[11] 
82510 
28 
Asynchronous 
Serial Controller 
[12] 
14C88 
14 
RS-232 Line Driver 


[13,14] 
14C89 
14 
RS-232 Line Receiver 


[15] 
82C55A 
40 
Programmable 
Peripheral 
Controller 
[16] 
PM7006 
24 
DC/DC 
Convertor 
(5V -12.00V) 
[17] 
7406 
14 
Invertor-open 
Collector 
(O.C.) 


C1 
20 ""F 
2 
Capacitor 
for CPU reset 
01 
1N914 
2 
Diode for CPU reset 
F1 
BUZ11A 
3 
I 
MOSPOWER 
nFET 
J1 
DB-25 
25 
Connector 
(male) 
OSC-1 
20 MHz 
14 
CPU Oscillator 
OSC-2 
18.432 MHz 
14 
Serial Controller 
Oscillator 
R1 
10 KO 
2 
%W, 10% Resistor for CPU reset 


R2 
1 KO 
2 
%W, 10% Resistor for O.C. pull-up 


SW1 
3 
Momentary 
Push Button for CPU reset 


NOTES: 
1. Place a 0.1 /LF bypass capacitor at the Vcc inputof each IC. 
2. Place a 0.1 /LF bypass capacitor on the Vpp inputof each 28F256 flash memory. 


28F512 
UPGRADE 
FOR THE 


80C186/FLASH 
MEMORY 
DESIGN 


2. Change the MCS individual block-select size from 


64 Kbytes: 


MMCS_ VALUE = 41F8H, 
MPCS_ VALUE = OAOB8H 
to 128 Kbytes: 


MMCS_ VALUE = OIFEH, 
MPCS_ VALUE = OCOBEH 
Also, cut the CE# trace to the RAM sockets. Then 
wire MCSO# to the RAM CE#. This eliminates the 
MCSO# and LMCS# 
range overlap caused by in- 
creasing the MCS range to 128 Kbytes. See 8OCl86 
Data Sheet page 21 and 22 (Order # 270354). 


To upgrade the 8OC186/Flash memory design to han- 
dle 28F512's, the range of the CE# 
signal has to be 


increased. There are a number of ways to generate a 
CE# signal that will span the 128 Kbyte address range 
of two 28F512 devices. 
1. AND two of the current MCS lines together (defined 


for 64 Kbytes each); or 
• 


28F010 
UPGRADE 
TO THE 
80C186/FLASH 
MEMORY 
DESIGN 


To upgrade the 80C186/flash memory design to handle 
28FOIO's, a CE# signal has to be generated. There are 
a number of ways to generate a CE# 
signal that will 
span the 256 Kbyte address range of two 28FOIOdevic- 
es. 
1. AND two of the MCS lines together (defined for 128 
Kbytes each as noted in the 28F512 modifications): 
Cut the LMCS trace to the RAM sockets. Connect 
MCSO# to CE# 
on the RAM sockets (UIOL,UH). 


Cut the MCS2# trace to the flash memory. Add an 
AND 
gate. 
Connect 
MCS2# 
(cut 
trace) 
and 
MCS3 # to the inputs of the AND gate. Then wire 
the AND gate output to the CE# of the flash memo- 
ries. 
Also, change the onboard memory MCS register to: 
MMCS_VALUE=01FEH, 
MPCS_ 
VALUE = OCOBEH[l28K blocks], 


and delete: 


LMCS_REG 
and LMCS_ Value. 
2. Add a decoder; 
Add a decoder (74HCI38). 
Connect address lines 
Al8 and Al9 to the Band C inputs of the decoder. 
Tie the A input of the decoder low, and enable all the 
enables. By using outputs YO, Y2, Y4, and Y6, you 
have four CE# 
lines decoding 256 Kbyte blocks 
each. 
Cut the MCS2 # trace to the flash memories. Con- 
nect the Y2 output from the decoder to the CE# 
input of the flash memory. 


RESET 


A16 


A,7 


A18 


A19 


BHE# 


So 


SI 


S2 
GND 


3. Replace the address latch (U2) with a PLD that 
latches and decodes. 
Program a 5C032 as an integrated latch and decoder. 
Replace the upper address latch [U2] with the Intel 
5C032 EPLD. Cut the CE# trace to the flash mem- 
ories. Connect the flash memories' 
CE# 
to the 


5C032 pin 12. This maps the address space 40000H 
to 7FFFFH. See Figures I and 2 for a comparison of 
the 74HC573 (U2) and programmed 5C032 pin outs. 
Figure 3 is the source code for the EPLD. 
Also, change the value of the MMCS and MPCS 
registers to 64 Kbyte blocks so that the MCSO# 
range does not overlap the LMCS range. 


MMCS_VALUE=4IF8H, 
MPCS_ 
VALUE = OAOB8H. 


RESET 
Vcc 


A,6 
LAI6 


AI7 
LAI7 


A,8 
LA18 


A,9 
LAI9 


BHE# 
LBHE# 


So 
LSo 


SI 
LS1 


S2 
LS2 


GND 
ALE 


292046-36 


Vcc 


LA, 6 


LAI7 


LA, 8 


LA19 


LBHE# 


CE# 
(40000H-OBFFFFH) 


CE# 
(80000H-OBFFFFH) 


CE# 
(40000H-7FFFFFH) 


ALE 
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Thom Bowns 
- PLFG Applications 
Intel 
January 13, 1989 
EPLD HOTLINE: 
1-800-323-EPLD 
002 
5C032 
Custom Latched Decoder 
OPTIONS: 
TURBO = ON 
PART: 5C032 


INPUTS: ALE@ll, RESET@l, A19@5, A18@4, A17@3, A16@2, nBHE@6 


OUTPUTS: 
LA18@17, LA17@18, LA16@19, LnBHE@15, 
nCE3@14, LA19@16, 
nCE2@13, nCEl@12 


ALE = IN (ALE) 


. RESET = INP (RESET) 
nRESET = NOT '(RESET) 
A19 = INP (A19) 
A18 = INP (A18) 
A17 = INP (A17) 
A16 = INP (A16) 
nBHE = INP (nBHE) 
LA19, LA19 = COIF 
(LA19d, nRESET) 
LA18, LA18 = COIF 
(LA18d, nRESET) 
LA17, LA17 = COIF 
(LA17d, nRESET) 
LA16, LA16 = COIF 
(LAI6d, nRESET) 
LnBHE, LnBHE = COIF 
(LnBHE, nRESET) 
nCE3, nCE3 = COIF 
(nCE3, nRESET) 
nCE2, nCE2 = COIF 
(nCE2, nRESET) 
nCEI, nCEI = COIF 
(nCEI, nRESET) 


EQUATIONS: 
LAl9d = Al9 * ALE + LAl9 * 
!ALE; 
LAl8d = Al8 * ALE + LAl8 * 
!ALE; 
LAl7d = Al7 * ALE + LAl7 * 
!ALE; 
LAl6d = Al6 * ALE + LAl6 * 
!ALE; 
LnBHEd = nBHE * ALE + LnBHE * 
!ALE; 
nCE3d = nCE3EQN * ALE + nCE3 * 
!ALE 
nCE2d = nCE2EQN * ALE + nCE2 * 
!ALE 
nCEld = nCEIEQN * ALE + nCEI * 
!ALE 
nCE2EQN = 
!(AI9 * 
!AI8); 
nCEIEQN = 
!(!A19 * A18) ; 
nCE3EQN = 
!(!A19 * Al8 + Al9 * 
!A18); 
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INTRODUCTION 
TO 
REPROGRAMMING 


Rewriting any type of memory requires hardware or 
software control. Traditional EEPROM designers com- 
bined all control functions into each chip's periphery. 
This provided a highly functional chip but at a high 
price. On the other hand, DRAM designers provided a 
bulk memory with little integrated peripheral circuitry. 
Each system designer then accommodated the DRAM 
with external refresh signals and learned quickly that 
failure 
to 
refresh 
yielded non-functioning 
memory 
boards. Initially, software drivers controlled DRAM 
refresh; today controllers provide the same function. 


Similarly, early disk drives required every user to write 
software to manipulate drive head movement. Failure 
to follow drive specifications and algorithms caused ir- 
reversibJe head crashes. Leading-edge engineers faced 
these challenges and triumphed, as evidenced by the 
sophisticated systems available today. 


Since 1988, thousands of engineers have written soft- 
ware to direct flash memory reprogramming. With first 
generation flash memories, one sends a control signal to 
a device to begin and end programming or erasure. It is 
a simple process implemented on more than 40 million 
units, however care must be taken. If algorithms are 
not properly followed, a device may be rendered inop- 
erable. This document discusses proper software and 
debug technique, which yields dependable first genera- 
tion flash memory operation. First generation products 
include the 28F256A, 28F512, 28FOIOand 28F020. All 
second and third generation Intel Flash Memories con- 
tain automated program and erase routines. 


FUNDAMENTALS 
OF FLASH MEMORY 
OPERATION 


Many designers use EPROMs regularly. Few consider 
the programming algorithms because the PROM pro- 
grammer vendors take care of that function. 


Two types of algorithms are in use today: 


• Adaptive Algorithms 
• Brute Force Algorithms 


Adaptive algorithms such as Intel's Quick-Pulse Pro- 
gramming 
and Quick-Erase 
algorithms 
reduce pro- 
gramming 
time. A feedback mechanism 
recognizes 
when each byte has been programmed sufficiently. You 
may ask how is the point of sufficiency determined? 


One simply adds the net effects of Vcc and tempera- 
ture variations, and superimposes on those factors the 
normal EPROM charge leakage to obtain the answer. 
The next question is how can these factors be checked? 


NOTE: 
EPROM and EEPROM charge leakage occurs over a 
very long time-typically 
100 years. Reliability papers 


often discuss charge leakage in terms of the memory's 
data retention characteristic. 


If you look at EPROM programming algorithms, you 
will notice that Vcc is elevated during programming. 
The elevated Vcc acts as the feedback mechanism for 
the adaptive algorithm. Reading the device and check- 
ing for program completion is called verification, or 
margining. (One is checking the margin to Vcc fluctua- 
tions.) For example, if the part can be verified at 6.25V, 
then it can withstand 
the fluctuations 
and normal 
charge leakage. 


During the past few years most major EPROM manu- 
facturers have converted to adaptive algorithms. The 
algorithm loops back and programs a byte again if the 
first program operation does not verify at the elevated 
voltage. 


Brute force algorithms simply program each byte mul- 
tiple times, typically with long program durations. This 
type of algorithm has no in-system margin verification. 
That is they assume but never verify program margin to 
the typical environment effects. 


Many flash memories that specify a brute force algo- 
rithm may fail to retain data for 10 years. Additionally, 
they may not read the data correctly even at specified 
Vcc and temperature extremes. 


Intel's flash memory program and erase algorithms are 
both adaptive. They offer margin verification without 
requiring users to elevate Vcc in-system. When issued 
a command to program verify, the memory's command 
register logic taps an internally-generated elevated Vcc 
from the user-supplied external Vpp (12V). This is why 
it is essential that you provide the specified Vpp voltage 
and follow the given adaptive algorithms. Intel's adap- 
tive algorithms, combined with the command register 
architecture, assures reliable code and data storage and 
dependable system operation. 


Figure I shows an example of an adaptive byte pro- 
gramming algorithm. Appendix A compares the algo- 
rithm in Figure 1 to a brute force approach. 
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Figure 1. The flow chart shows the fundamental 
nature of an adaptive algorithm. Based on the 
outcome of program verification, 
the flow may 
loop back for another program operation. 


Moving Charge and Other Factors You 
Should Know 


This section discusses the mechanics of flash memory 
programming. For most system designers, transistor- 


level discussions were last heard in college. We may 
recall that DRAM consists of a storage capacitor and a 
transistor. We remember this clearly because failure to 
refresh that capacitor causes systems to malfunction. In 
like fashion, one should understand the fundamentals 
of flash memory reprogramming. The understanding 
will enable error-free memory operation and reliable 
system performance. 


In simplest terms, each data bit equates to a memory 
cell. Intel's flash memory uses one transistor per cell 
with the smallest possible architecture. 
This delivers 


the lowest cost per bit and highest capacity, levering 
system software (rather than bulky, complex cells) for 
reprogramming control. 


Figure 2 shows a simplified cross section ofIntel's flash 
memory transistor. Note the structure; the cell is a 
stacked gate MaS transistor. An isolated floating gate 
stores the memory charge. The floating gate consists of 
a layer of (conductive) polysilicon surrounded by (non- 
conductive) oxide layers. 


On a DRAM cell, each transistor connects to a capaci- 
tor which stores the memory charge. The major differ- 
ence between flash memory and DRAM derives from 
their cell structure. The DRAM cell loses its charge if 
not refreshed within a few milliseconds. On the other 
hand, the flash memory floating gate maintains 
its 


charge for typically 100 years. The structure is isolated 
and insulated by the field and gate oxides-hence 
the 


name "floating" gate. 


=""U( 
! S 
Floating 
Gate 


Figure 2. Simplicity of design assures increasing densities, manufacturability 
and reliability. 
These are the attributes that drive mainstream memories. 
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CONTRARY 
TO INTUITION 
CHARGE = DATA "0" 
NOT DATA "1" 


PROGRAMMING: 
ADDS CHARGE TO FLOATING 
GATE 
- 
DATA = 0 


ERASURE: 
REMOVES SOME CHARGE FROM FLOATING 
GATE 
- 
DATA = t 


PROGRAMMING 
DATA WITH MIXED 08 and 18: 
- 
ONLY DATA "0" BITS GET CHARGED 
- 
DATA "I" BITS REMAIN UNCHARGED 


Changing the memory contents is simple. Figure 3 
shows two memory cells---one being erased and one 
being programmed. Erasure removes charge from all 
bits simultaneously. Programming adds charge to se- 
lected bits. During erasure, not all charge is removed. 
The 
erase verify operation 
tells the system when 
enough charge has been removed. At that point, the 
flash memory behaves like a U.V.-erased EPROM. 


Removing too much charge by erasing too long renders 
the memory unprogrammable. Excessive erasure lowers 
the cell threshold to the point where the transistor is 
always on and always reads data "I". (Recall that the 
cell threshold, Vto determines when the transistor turns 
on or off.) You must control the erase timing within the 
algorithm specifications on first generation flash mem- 
ories. 


A second erase consideration relates to the first. Prior 
to erasing the chip, you must blanket program all bytes 
to data DOh,regardless of the previous data. This step 
equalizes the charge on all transistors. 


If you skip this step and proceed directly to erasure, an 
interesting thing happens. Consider a typical byte pro- 
grammed with data OAAh (1010 10lOb). While pro- 
gramming this data, bits with data "I" remain erased 
(charge removed), and bits with data "0" are pro- 
grammed (charged added). Following programming, 
normal read operations sense whether a memory tran- 
sistor has more or less charge and drives the outputs 
accordingly. 


Erasure 
Removes Charge from Floating Gate 
ICG 
OV 


Programming 
Adds Charge to Floating Gate 


Vgs> 
Vt turns transistor 
on creating 
source-drain 
channel 
(Idsl; 
Field from Vgd attracts 
electrons 
from channel 
current 
towards 
floating 
gate. 


Figure 3. Flash memory cells during erasure and programming. Note the 
movement of charge on and off the floating gate. The charge adjusts the 


cell threshold, which tells the outputs whether a bit (transistor) 
Is on or off. 


Erasure then removes charge from all bits. The bits that 
have had charge added (data "0") have some quantity 
of charge removed; bits with less charge (data "I") 
have charge removed as well. This is akin to excessively 
erasing the data "I" bits. Pre-programming all bits to 
data "0" equalizes the charge which allows for con- 
trolled, uniform erasure of all bits in the device (i.e., all 
1,048,576 bits in a 28FOIO). 


The sections entitled 
"Margin 
for Error" 
and the 
"Erase Algorithm 
Interpreted, 
Program all Bytes to 
ooh" discuss this concept in greater detail. 


Erasure removes charge from all memory cells in paral- 
lel. This lowers the cells' threshold voltages from the 
programmed level (6.5V) below Vcc to the erased level 
(3.2V) The device continues erasing until told to stop 
by the verify command or until the integrated stop-tim- 
er counts down. 


Allowing erasure to continue too long depletes the 
charge in floating gates. So you ask-how 
long is too 


(Voltll) 


8 


7 


Typical 
• PrlNnIm 
Levll 
/ 
I 
I 
I 
I 
I 
: 
Typical 


I 
......-::: 
ErQ8Ure 


'/' 
Completed 
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long? Figure 4 shows the margin for error of a typical 
device. Following the algorithm would have stopped 
erasure after I second. Cell depletion occurred after 10 
seconds givin} a lOx margin for error. This lOx margin 
exists if the erased cell erases in I second or 10 seconds 
(i.e., within the algorithm limits). This chart shows one 
typical example where the device happened to take I 
second to erase. 


Flash memory has generous margin for error over the 
stopping point defined by the algorithm. The stopping 
point is defined as the point when all bytes in the chip 
verify to FFh 
data. 
The erase operation 
duration 


(Twhwh2) is specified at 10 ms ± 500 jJ.s. Five hun- 
dred microseconds offers substantial allowance for sys- 
tem latency during erasure and even for slop in the 
timer generation. Processors or controllers can execute 
many lines of code in 500 jJ.s,and the margin for error 
simply adds another guardband. 


Proper software and system design will never rely on 
the additional margin for error. Remember, you control 
the program code and system operation during erasure. 
Once you have fully debugged your driver code, the 
issue of software control disappears entirely. 


2 3 4 5 I 
7 8 9 1~11 (Secondl) 


I 
ERASE 
TIME 
I 


:. 
WARGlN 
rOR 
ERROR 
• : 


Figure 4. The logarithmic-decaying 
nature of erasure allows for 10x 
error in erase time before a device becomes Inoperable. Remember, 


each device has Its own erase time, thus the use of an adaptive algorithm. 


Having covered the fundamentals of flash memory re- 
programming, let's move on to the system's hardware 
and software perspectives. The following list of ques- 
tions might have occurred to you .•. 
• You have defined a system power supply with regu- 


lated 5V and 12V outputs (Vcc and Vpp). Due to 
the smaller capacitive load on the Vpp supply, Vpp 
powers up much faster than the Vcc supply. Will 
this affect the device? 


• How does the flash command register architecture 
reset? 


• Suppose your code sends a signal to start erasure, 


and never tells it to stop? 


• Suppose your software delay timers are not calibrat- 
ed. Instead of stopping erasure after ten millisec- 
onds, the code issues the stop command after 10 
seconds? 


• Suppose your 6 J-Ls timer used between the erase and 
erase verify modes is only 2 J-Ls? 


• Suppose you decide to skip the first erase operation 


(program all bytes to zero) because the device is al- 
ready programmed with data? 
• Suppose you are programming and erasing devices 


in a 16- or 32-bit system? 


The answer to all these questions can be found in the 
following sections. The questions and the reasons all 
relate to the discussion of how the cell works. 


Many logic devices which contain command or control 
registers also have a reset pin. This pin serves two pur- 
poses: it resets the device's internal logic; and it syn- 
chronizes the device's clock to the system clock. 


Intel's first generation flash memory command register 
and reprogramming circuitry reset to the read mode by 
three means: 
I. raising or lowering Vpp with Vcc = 5V; 
2. raising Vcc with Vpp = 12V; 
3. issuing the reset command twice in succession. 


NOTE: 
Method 3 stops erasure or programming as well as re- 
sets the chip. 


Assuming VCCis stable with Vpp switches on, then the 
command register defaults to the read mode. No pow- 
er-on reset is required. 


Designers might opt to include the Vpp switch for 
either (or both) of two reasons. The first reason is pow- 
er minimization. Depending on the technology used, a 
voltage regulator or pump's efficiency can range from 
40%-85%. 
Switching off the Vpp supply minimizes 


system power consumption. See Appendix B for an ex- 
ample Vpp generation circuit with ON/OFF 
control 


capability. 


The second reason is absolute data protection. This fea- 
ture is not available to 5V-only EEPROM because the 
reprogramming voltages are generated internally. On 
that class of memory device, logic glitches can spuri- 
ously change data during system power up or power 
down. Flash memory's 12V power requirement offers 
absolute control over these concerns; with Vpp below 
Vcc + 2V, data protection is guaranteed. Internally, 
the electric fields are simply too weak to spuriously 
write data. 


Systems with Vpp hardwired to a regulated transformer 
might encounter this case. Typically, Vcc will charge 
many more bypass capacitors 
than Vpp. VCC will 


therefore power up much more slowly. 


The flash memory power-down (Vcc 
= OV) default 


state blocks Vpp from disturbing the array. These con- 
ditions hold while Vcc is below - 2V. Once Vcc rises 
above - 2V, the internal logic kicks in and resets the 
device to the read mode. (This is analogous to the inter- 
nal Vpp reset condition described in Case I.) 


Should the three control pins glitch during the power- 
up phase (CElow, WElow, and OEhigh), then the com- 
mand register acts to filter the data. The command port 
will only react to the correct command sequence. 


Designers might opt to hardwire Vpp for a number of 
reasons. The first reason is cost minimization. A regu- 
lated 12V secondary from a transformer is commonly 
available. Adding a switch or a power supply sequencer 
adds cost and complexity. The second reason involves 
consideration of the end application. Using the flash 
memory as a read/write memory requires optimization 
for the write cycle. Powering Vpp on before each write 
would waste considerable time. 
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Bus 
Command 
Comments 
Operation 


Standby 
Wait for Vpp Ramp to 
VPPH (= 12.0V)(1) 


Use Quick-Pulse 
Programming 


Initialize Addresses, 
Erase Pulse Width, and 
Pulse Count 


Write 
Set-Up 
Data = 20H 


Erase 


Write 
Erase 
Data = 20H 


Standby 
Duration 
of Erase 


Operation 
(Twhwh2) 


Write 
Erase 
Addr = Byte to Verify; 


Verify 
Data = AOH; Stops 
Erase Operation 


Standby 
tWHGL 


Read 
Read Byte to Verify 
Erasure 


Standby 
Compare 
Output to 


FFH, Increment 
Pulse 


Count 


Write 
Read 
Data = OOH, Resets 
the Register for Read 
Operations. 


Standby 
Wait for Vpp Ramp to 
Vpp 111) 


NOTES: 
1. The Vpp power supply can be hard-wired to the device or switchable. When Vpp is switched, Vpp 1 may be ground, 
no-connect with a resistor tied to ground. or less than Vcc + 2.0V. 
2. Erase verify is performed after chip-erasure. A final read/compare may be performed (optional) after the register is 
written with the read command. 
3. CAUTION: The algorithm MUST BE FOLLOWED to ensure proper and reliable operation of the device. 


Warm resets, where the system maintains power while 
rebooting, requires closer inspection. Consider the situ- 
ation where the system is reprogramming 
the flash 


memory and a hardware or software reset occurs. 


The boot software would not realize that programming 
or erasure is ongoing and would not know to stop the 
reprogramming operation. Therefore safeguard against 
this condition with one of two means: 1) ensure that 
control logic switches Vpp off during reset; or 2) reset 
the flash memory before resetting the processor. For a 
software reset, simply add the flash memory reset com- 
mand to the interrupt sequence. For hardware resets, 
wire the reset switch to the interrupt controller instead 
of directly to the reset input. Hardware resets would 
then execute the software interrupt 
sequence. Intel's 


second and third generation flash memories all include 
a HIW reset pin (RP #) formally called PWD #. This 
pin is essential for any device with automation or em- 
bedded algorithms. 


The following section offers a block by block explana- 
tion of the Quick-Erase algorithm shown in Figure s. 
Understanding 
the reasons behind a function will en- 
able you to appreciate the importance of following the 
algorithm explicitly. Deviations will negatively affect 
the part's performance and should not be attempted. 
Note: the effect may not be immediately apparent. 


Apply VPPH (Optional, see Discussion on Device Ini- 
tialization) 


Switch on the local Vpp supply prior to erasure and 
programming. The time required for Vpp to reach its 
steady state 12 ± 0.6V depends on the capacitive load 
and the impedance of the printed circuit board trace. If 
you measure this delay on a wire-wrapped prototype 
system, remember 
that 
temperature, 
printed 
circuit 


traces and the board's layout change the load seen by 
the Vpp generator. Allow Vpp sufficient time to ramp 
before proceeding with the next step. 


Program All Bytes to OOb-+ Data = OOM 
Prior to erasure, blanket program all addresses in the 
flash memory to ooh (charge state), regardless of the 
previous data. Verify that each address equals ooh be- 
fore proceeding to the next address. If you use only part 
of the memory array, you still need to pre-program the 
entire array for erasure. An example where this is an 
issue is using a Sl2K in a 2S6K socket. A second exam- 
ple is a system where internal microcontroller memory 
overlaps the external flash memory space. 


Programming data ooh equalizes the charge on every 
bit in the array. This is necessary because erasure re- 
moves charge from all cells regardless of their previous 
state. 


For example, reconsider the byte containing AAh data 
(1010 10lOb). If you skip the pre-program step, then 
during erasure when the data "0" bits get charge re- 
moved, the previously erased bits (data "I") lose addi- 
tional charge. This drives the cell threshold a little low- 
er. The next time you erase the chip and change the 
code, the threshold will drop to 2.8V. 


If the memory transistor is not pre-programmed to data 
"0" before the next erasure, then its threshold will drop 
on successive reprogramming cycles (denoted by E3, 
E4, etc. in Figure 6). Repeated violations of the blanket 
programming requirement drives the threshold to the 
point where the transistor is stuck on (data = "I"). 


Variable Initialization 


Initialize two variables and a constant: ADDR 
(ad- 


dress), PLSCNT (pulse count), and TEW (erase pulse 
width). The pulse count increments from 0 to a maxi- 
mum of 1000 erase tries. The erase pulse width remains 
constant at 10 ms. The address increments from the 
flash memory starting address to the ending address 
during verification. 


(Volts) 


Program 
8 
Level 
.• -- 
_. 
(Data"0") 7 


6 


Erasure 
4 
Level 
. __.- 
(Data"1") 3 


2 
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Figure 6. Successful erasure requires blanket programming all bytes to 
the data "0" level first. This prevents threshold decline on successive erase 
cycles (E2, E3, etc.). Very low thresholds cause the chip to malfunction. 


Write Erase Set-Up Command 
Write the erase set-up command (20h) to any flash 
memory address. This prepares the selected device for 
erasure, but does not activate the process. A second 
erase command (20h) is required. Any other data writ- 
ten to the flash memory between the set-up and erase 
commands will abort the sequence. Once the process is 
started, it will not stop until told to do so. The correct 
stop erasure command is Erase Verify (AOh). However, 
any command including the Reset command is an ille- 
gal sequence and will stop erasure as well. 


Write Erase Command 
The erase command starts the erase process. Internally, 
the device switches the voltages on all memory cell 
drains, gates, and sources to the erase configuration. 


Time Out Tew (10 ms) 


Start your software or hardware 
timer. Until com- 


manded to verify or until the integrated 
stop-timer 
counts down, the flash memory continues the erase pro- 
cess. Therefore, assign a high priority to the timer in- 
terrupt. If a higher priority interrupt occurs, stop the 
erase process and switch contexts (store all variables, 
registers, etc.). This will allow reentry into the erase 
procedure in a controlled fashion. 


Write Erase Verify Command 
Write the erase verify command (AOh) to the flash 
memory at the address given by the ADDR variable. 


The erase verify command performs many tasks. Inter- 
nally, the device stops erasure and latches the given 
address for verification. Additionally, 
the command 


changes the voltages on the memory cell drains, gates 
and sources to the erase verify configuration. 


Time Out 6 IJ-s 
This time out accounts for the internal slew rate of 
switching the memory array from the erase to the erase 
verify configuration. Do not attempt to read from the 
device before 6 IJ-shas passed; the device will appear to 
still be programmed. This is because you have not al- 
lowed sufficient time for the memory to change config- 
urations. Your code will then interpret this as a need 
for extra erase operations, and will continue erasing the 
device. 


NOTE: 


6 IJ-s is a mInImum specification. You can use the 
10 IJ-s timer developed for the programming 
algo- 


rithm. 
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Read Data from Device 
Read the data at the address given by the ADDR vari- 
able. This should be the same address driven with the 
erase verify command. 


Data = FFh? 
Compare the output data at address ADDR to FFh. If 
the data equals FFh, then that address has been erased. 
Continue verification until the last address has been 
verified or until the maximum erase pulse count (1000) 
has been reached. Typically, most devices will fully 
erase within 50-100 erase loops. 


Last Address - 
Increment Address 


Check the ADDR variable to see if the last address has 
been verified. If not, increment the ADDR variable and 
re-write the erase verify command. Remember to write 
the erase verify command to address ADDR, since the 
verify command latches the address. Also, if your sys- 
tem has 64K byte segment boundaries, be sure to incre- 
ment the base pointer every 64K byte addresses. 


Write Read Command 
After full chip verification, write the read command 
(OOh)to switch the device to read mode. If you plan to 
reprogram the device immediately, this step is not nec- 
essary. 


Apply VPPL (Optional) 
Switch Vpp off. With Vpp left on, the command regis- 
ter offers data protection by requiring a precise se- 
quence to initiate programming or erasure. However, 
Vpp controls 
overall 
command 
register 
operation. 
Turning Vpp off disables the command register, thus 
providing absolute data protection. Without the high 
voltage, the reprogramming mechanisms cannot occur 
and the component 
becomes a read only memory 


(ROM). 


AbortlReset 
Whenever a system error condition occurs (reset or re- 
boot), write the Reset command (FFh) to each flash 
memory twice in succession. This is a good initializa- 
tion practice in systems leaving Vpp at 12V. The proc- 
essor would be unaware if prior to the reset, it had been 
in the middle of erasure, and this sequence aborts era- 
sure. 


The full algorithm will not be interpreted 
here, al- 


though a few items should be noted. You can find a 
conceptual version of the Quick-Pulse Programming al- 
gorithm in Chapter 2, Figure I, and the complete flow 
chart in Appendix C. 


First, similar to erasure, a two-write sequence starts 
programming. The first write is the Program Set-Up 
Command which primes the chip for programming. 
The chip then latches the address and data to be pro- 
grammed on the second write. You can abort program- 
ming by writing the Reset Command twice in succes- 
sion instead of the data to be programmed. 


Second, the device continues programming until com- 
manded to stop by the Program 
Verify Command. 


Similar to the Erase Verify Command, this command 
performs a couple of functions. Internally, it halts pro- 
gramming and latches the given address for verifica- 
tion. Additionally, the command changes the voltages 
on the memory array's drains, gates, and sources to the 
program verify configuration. 


The 
cell programming 
mechanism 
is self-limiting. 


However, do not assume that programming all twenty- 
five 10 /Ls operations in one pass is the best way to 
attain reliable operation. To a certain degree, program- 
ming stresses the memory cell. The stress is considera- 
bly lower than that applied to EEPROM 
(2 MVfcm 


lower to be specific). But why stress a component with- 
out cause? The adaptive Quick-Pulse Programming al- 
gorithm with its fast program operations, minimizes all 
stresses and affords the greatest reliability. 


Finally, after writing the Program Verify Command to 
the device, wait a minimum of 6 /Ls before reading the 
device. The time out accounts for the internal slew rate 
of switching the memory array from the program to 
program verify configuration. Do not attempt to read 
from the device before 6 /Ls has passed; the device may 
appear unprogrammed. Your code will then interpret 
this as a need for extra program operations. It may 
needlessly reach the 25 operation limit, even though the 
byte most probably programmed on the first pass. 


Always follow the erase command with an erase verify 
command to stop erasure. 
Interrupt-driven 
systems 


must give high priority to servicing the reprogramming 
timer interrupts. Systems that reset upon a watchdog 
time-out must reset the flash memory device before re- 
booting. (See discussion on device initialization.) Like- 
wise any non-maskable interrupt should software- or 
hardware-reset the flash memory before performing a 
context switch. 


Use an oscilloscope to calibrate all time delays before 
attempting 
erasure. 
The delay modules include the 
6 /Ls, 10 /Ls, and 10 ms timer routines. 


Blanket program all addresses to DOh data before eras- 
ing. Verify correct implementation of the programming 
algorithm with a PROM programmer before attempt- 
ing erasure. (Chapter 4 explains how this can be done.) 


16- and 32-bit systems require special attention. Each 
flash device has its own erase characteristic. Do not 
assume that if the low byte of a data word is not erased, 
then the high byte must not be either. 


Always follow the listed guidelines and take care while 
developing your code to eliminate the erase control 
issue. Consider it similar to implementing any control 
function. Once the code is debugged and stable, the 
issue goes away. 


You might ask, is it not possible to control erasure 
through hardware? The alternative to software control 
is integrated hardware control or an external controller. 
Intel ofers a complete line of high density, cost-effective 
products with integrated hardware control, often called 
automation. Whether software or hardware controlled, 
Intel's ETOX Flash Memory offers the most reliable, 
dense, manufacturable, and fastest read/write nonvola- 
tile memory. Other EEPROM approaches have draw- 
backs of multiple transistors 
per memory cell. This 
property negatively affects all those attributes offered 
by Intel's ETOX flash memory. 


DEBUGGING 
YOUR CODE AND 
OTHER TIPS ON TESTING 


As with any software checkout, a few simple principles 
enable complete flash memory algorithm debug. The 
following sections offer some hints to make your job 
easier. 


Intel saves you time by offering various processor-fami- 
ly flash memory drivers. You simply edit the files to 
suit your system. Then assemble the driver, link, and 
locate it, and you are ready for debug. 


These drivers offer the framework for successful flash 
memory reprogramming, and require some customiza- 
tion to fit your particular system. If your processor's 
driver is not available, you may use the available driver 
software as an example. One caution in advance: The 
drivers have been written in assembly language to give 
the most speed- and memory- efficient code. However, 
most people prefer high-level programming. 


High-level programming can be used for everything ex- 
cept software-timer 
generation. Compilers may give 
different routines with different object code on each 
compilation. Therefore, the timers must be either hard- 
ware-based or coded in assembly language. Software 


timers also present some risk if there is a frequency 
upgrade change on the controlling processor. Regener- 
ate and check your timer routines whenever the system 
clock rate changes. 


Timers, Test Loops and Assembly 
Level Programming 


Timing circuits or software play the most crucial role in 
flash memory reprogramming. Good timers precisely 
control their function; sloppy timers produce faults. An 
example of a sloppy timer is one produced by a compil- 
er. Each time high-level languages recompile, the low- 
level object coding may change. Thus, a timing loop 
may be 10 ms one compilation, and much longer or 
shorter the next time. 


You can check your timing method with the following 
simple technique. Develop test loops which call the var- 
ious timers' routines. For example, implement the 6 J.l-s, 
10 J.l-s,and 10 ms timers used with the 28F512 and 
28FOIO. If you have a spare port or peripheral output, 
use it to trigger an oscilloscope. Follow the trigger call 
with the timer routines. If you do not have a spare port, 
write to the flash memory address space before and 
after each timer call. You can trigger the oscilloscope 
off of the flash memory CE# 
signal. Remember to 


power-down the system and remove the flash memory 
before attempting these methods. 


Once the timer code has been verified, you can link and 
locate it to a higher-level erase/program 
algorithm im- 


plementation. 


Programming-The 
Key to Proper 
Erasure 


Earlier sections described the importance of program- 
ming OO'sprior to erasure. This procedure equalizes the 
charge on all memory cells; following this step all bits 
erase in unison. 


A conclusive debug technique can check your program- 
ming software. Simply use your software to program 
zeroes into the flash memory and then verify this step 
using a conventional PROM programmer. 
Load the 


PROM programmer's buffer with all zeroes and com- 
pare the buffer to the flash memory. If your program- 
mer does not service the flash memory, call the compa- 
ny for the latest software upgrade. Alternatively, one 
can easily rig the 512K flash memory to look like a 
512K EPROM. Simply jumper Vcc on a 32-pin socket 


to a few pins. Note that 
the 27512 EPROM 
and 


28F512 flash memory have different intelligent identifi- 
er codes. Override the identifier code check to use this 
method. See Figure 7 for socket details. 


Some microcontrollers have limited address space or 
internal memory that masks certain external address 
space. Even if you do not use sections of the flash mem- 
ory, you must still access these sections to program ze- 
roes before erasure. Map and decode port bits to access 
unused address space, and verify that all bytes are pro- 
grammed to zero before proceeding with erasure. 


Figure 7. A 28F512 can be read in a PROM 
programmer 
as a 27512 by jumpering 
the 


appropriate 
pins to Vcc. The same method 


applies to the 28F010. 


16- and 32-Bit Systems- 
Achieving Optimum Reprogramming 
Throughput 


Erasing flash memory in 16- and 32-bit systems re- 
quires special consideration. One could implement the 
program and erase algorithms in a byte-wise fashion, 
but this is time-consuming. Alternately, one can treat 
the multiple flash memory as a data word, and gain' 
optimum performance. 


The primary consideration with the latter approach is 
that one device may program or erase faster than the 
other(s). Subsequent programming or erasure of a slow- 
er device compromises the functionality of the faster 
device by subjecting it to the slow-device timing. 


Consider an example of erasure in a 16-bit system. Af- 
ter 10 passes through the erase operations, both devices 
verify through address 07C3h. Then at address 07C5h, 
the processor reads data word 83FFh. 


Since erase data is FFFFh, a few bits in the upper byte/ 
device have not erased. The natural flow of the algo- 
rithm would dictate another erase operation. But what 
about the lower device? Could it be completely erased? 


Of course it could be; every device erases at a different 
rate and the algorithm has only checked up to address 
07C5h. 


You can take advantage of the data rate of wider data 
buses by utilizing the command register, the reset com- 
mand and an analysis of erasure. Each erase operation 
is 10 ms. Each byte verification takes 6 Jl.s.Therefore, 
erasure takes three orders of magnitude longer than 
verification. Optimization for erasure yields the opti- 
mum performance 
because verification is a second 


order effect. 


Let us reconsider the previous example. At address 
07C5h, the data word does not verify. On the next erase 
operation edit the erase (and erase verify) command 
word such that only the high byte gets the erase com- 
mand, and the low byte gets a reset command. (i.e., 
change the command word from 2020h to 20FFh). 


See Application Note AP-316 for a detailed flow chart 
for this approach. Note this document is based on the 
28F256; however, most concepts carry through to the 
higher 
density 
devices. 
(Literature 
Order 
number 


292046). 


Logic Analyzers 
and In-Circuit 


Emulators 


Many programmers use logic analyzers and in-circuit 
emulators to debug code. These approaches are fine for 
flash memory algorithm debug if certain conditions are 
met. 
I. Check timing routines with an oscilloscope; there is 


no alternative. 
2. Know your code and set breakpoints intelligently. 


One designer had the bad luck of throwing in a 
breakpoint in the middle of the program OO'sloop. 
After stepping through a couple of byte program 00 
loops, he called the erase flow routine. Can you iden- 
tify the problem? 
3. Single step through your reprogramming code, if and 


only if, the flash memory device is removed from the 
system. 


Testing Your Software-One 
More 
Time 


Some flash memories specify 100 erase/program cycles. 
This is a minimum specification; Intel Flash Memories 
cycle 100,000 times. With this in mind, feel free to 
check and recheck reprogramming operations. There is 
no reliability risk in doing so. 


One confidence-raising test is similar to that done on 
systems: stress the system/software 
by executing test 


code numerous times consecutively. Set the reprogram- 
ming drivers in a loop, and let them run 20-40 times. 
On each consecutive pass, use a constant data pattern 
such as OAAh. This tests the reprogramming code from 
a quasi-static perspective. Missing is the true system 
environment. In the true system environment, multiple 
inputs compete with the flash memory for interrupt pri- 
ority. Also, RF noise from motors can cause spikes and 
glitching on Vpp or Vcc. 
Additionally, fully loaded 


systems or partially loaded systems might have differ- 
ent Vpp response characteristics or noise levels. Signals 
that look clean in the lab, might not be all that clean in 
the true operating environment. Therefore, flash repro- 
gramming tests should be done in the true system envi- 
ronment as a final test. 
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This section describes a simple tool you can build for 
debugging your code. Since Intel's 
first generation 


Flash Memories contain integrated 
stop-timers, 
this 


tool offers no real benefit. It is simply shown in case a 
designer is debugging code for alternate sources. An 
EPLD watches the flash memory data bus and control 
signals for the erase sequence--erase set-up, erase, and 
erase verify commands. Once the CPU initiates erasure, 
the debug tool starts a 15 ms timer. Should the timer 
count down prior to receiving the erase verify com- 
mand, then the circuit switches Vpp off. 


This tool does not check for the other items discussed 
in the Tips on Testing section; you must still check 
those yourself. 


Figure 
8 shows the circuit 
schematic. 
The EPLD 


source code and the name of an Intel EPLD applica- 
ti~ns engineer is located in Appendix D. 


Determining 
the Root Cause- 


Software 
Error vs Device Damage 


The three major indications of a flash memory problem 
are labeled in the following section. The subsequent 
paragraphs defme potential root causes to investigate. 
I. The Device Does Not Program 
Did it program before? 


A.No. 
1. Trigger your oscilloscope on CE# 
while prob- 
ing Vpp. Verify that Vpp has reached a steady- 
state l2V when the device is first written. 
2. Set the time-base to 10 IJos/division(the dura- 
tion of the program 
operation). 
Trigger on 
CE# 
and probe WE# 
(look at both traces). 


Check the duration of the 10 IJosprogram oper- 
ation time delay. Also, check the duration of 
the 6 J.losdelay between writing the program 
verify command and read. 


3. Look for ringing on Vpp when Vpp has been 


switched on. Over-voltage stress on Vpp (ring- 
ing with amplitude greater than BY) will de- 
stroy Vpp's silicon structure. 


4. Power the system down and back up. Look for 
destructive glitches on Vcc 
or Vpp (greater 
than 7V and l3V respectively). 


5. Verify erasure and programming on a PROM 
programmer (if available). Fill the programmer 
buffer first with OOhdata and program the buf- 
fer to the flash memory. Then erase the device, 
and repeat with AAh data. Repeat the last step 
with 55h data. This sequence fully exercises the 
array, the input buffers and the output buffers. 
If all tests pass then check for a hardware or 
software error. 


B. Yes. 


1. Have you done anything that may have ESD 
zapped the devices (i.e., touched the devices 
while not being grounded, re-wired the proto- 
board with the components socketed, etc.)? If 
yes, check part as outlined in section I.A.5. 


2. Have you attempted 
erasure? If yes, verify 


your algorithm as outlined in Chapter 4. Also, 
implement the in-system intelligent identifier 
mode. If the device outputs an incorrect code, 
then either an output has been zapped or the 
golden rule has been violated. Section I.A.5 
describes a method of checking for ESD dam- 
age. 


II. The Device Does not Erase 
Did it erase before? 
A.No. 
Follow steps 1-5 outlined in section I. When 
performing step 2, adjust the oscilloscope time 
base to 10 ms/div. 


B. Yes. 
Has the board design, clock rate or software 
changed? System clock rates directly affect the 
accuracy of software timers. See AP-316 for a 
discussion on software timing versus clock rate. 


III. The Device Erases Spuriously 
Exercise all system functions while monitoring the 
flash memory chip selects. Verify that I/O mapped 
addresses or logic are not accidentally selecting the 
flash memory. For example, the space bar charac- 
ter sent from a keyboard controller happens to be 
20h. If the flash memory is accidentally selected 
while this data is on the bus, then erasure will com- 
mence on the following cycle when the condition 
occurs again. 


o Efficient- 
Max Time = (10 + 6 ,...s)• 25 
= 4OO,...s 
TypTime 
= (10 + 6 ,...s). 1 
= 16,...s 


o Reliable- 


Verify Command slewsinternal voltages to simu- 
late elevated Vcc. 
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o Slow- 
Max Time = (100 ,...S • 12) + 3 ms 


= 4200,...s 
Typ Time = (100 ,...S • 10) + 1.5 ms 


= 2.5 ms 
o Questionable- 


Unknown 
margin to 
Vcc 
and 
temperature 


swings, as well as cell leakage. 


Figure 9. Left and right flow charts compare 
Intel's (adaptive) 
Quick-Pulse 
Programming 
algorithm 
and another 
company's 
(brute force) 
approach 
to flash memory 
programming. 


Vpp 
OUTPUT 
200mA 
~AX 


Figure 10. Basic flash memory Vpp voltage supply with ON/OFF control. 
When Vpp COMMAND goes low, the LInear Technology 
LT1072 switching regUlator produces 12V. 


This circuit Is Just one example of a Vpp supply. 
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APPENDIX 
C 
QUICK-PULSE 
PROGRAMMING 
ALGORITHM 


Bu. 
Command 
Comments 
Operation 


Standby 
Wait for Vpp Ramp 
to VPPh (= 12.0V)<1) 


Initialize Pulse-Count 


Write 
Set-Up Program 
Data = 40H 


Write 
Program 
Valid Address/Data 


Standby 
Duration of Program 
Operation 
(twHWH1) 


Write 
Program(2) Verify Data = COH; Stops 


Program Operation 


Standby 
tWHGL 


Read 
Read Byte to Verify 
Programming 


Standby 
Compare 
Data 
Output to Data 
Expected 


. 


Write 
Read 
Data ~ DOH, Resets 
the Register 
for 
Read Operations. 


Standby 
Wait for Vpp Ramp 
to VPPI (1) 


NOTES: 
1. The Vpp power supply can be hard-wired to the device or switchable. When Vpp is switched, Vpp I may be ground, 
no-connect with a resistor tied to ground, or less than Vcc + 2.0V. 
2. Program Verify is only performed after byte programming. A final read/compare may be performed (optional) after the 
register is written with the Read command. 
3. CAUTION: The algorithm MUST BE FOLLOWED to ensure proper and reliable operation of the device. 
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APPENDIX 
D 
WATCHDOG 
TIMER CIRCUIT 


EPLD Source Code and Applications 
Contact Person 


Thom Bowns_PLFG 
Applications 
Intel 
January 5, 1989 
Rev. 008 
5AC3l2 
Watchdog 
timer to cut Vpp from FLASH if erase cycle too long. 
OPTIONS: 
TURBO = ON 
PART: 5AC3l2 


CLK, DO@3, Dl@4, D2@5, D3@6, D4@7, D5@8, D6@9, D7@10, 
nCE@2, nWE@ll, TIMER_IN@13, 
RESET@14, 
AHR@15 


TIMCLR@23, 
TIMST@22, LED@2l, VPP@20 


CLK = INP (CLK) 
DO = INP (DO) 
Dl = INP (Dl) 
D2 = INP (D2) 
D3 = INP (D3) 
D4 = INP (D4) 
D5 = INP (D5) 
D6 = INP (D6) 
D7 = INP (D7) 
nCE = INP (nCE) 
nWE = INP (nWE) 
TIMER_IN = INP (TIMER_IN) 
RESET = INP (RESET) 
AHR = INP (AHR) 
CONDl = NOCF 
(Cld) 


COND2 = NOCF 
(C2d) 


COND3 = NOCF 
(C3d) 


COND4 = NOCF 
(C4d) 


CLR = NOCF 
(CLRd) 


% RESET active high if AHR is high % 
% Conditions 
1-4 are routed 
% 


% through 
combinatorial 
feedbacks 
% 


% to reduce product term count. 
% 


% 
% 


CLRd = RESET * AHR + 
!RESET * 
!AHR; 


TIMEOUT = ITIMER_IN; 
Cld = (/nCE * InWE * 20H) ; 
C2d = (/nCE * InWE * aOH) ; 
C3d = 
(/nCE * InWE * 120H) ; 


C4d = (/nCE * InWE * IAOH) ; 
20H = ID7 * ID6 * ID5 * ID4 * 
AOH = ID7 * ID6 * ID5 * ID4 * 


% Write 
% Write 
% Write 
% Write 
ID3 * ID2 
ID3 * ID2 


20 % 
AO % 
other than 20 % 
other than AO % 
* IDl * IDO; 
* IDl * IDO; 


oIfi.n.~""i. ••• 
",", 
• 
"A.L""nVVU 
CLOCK: 
CLK 


STATES: 
VPP 
LED 
TIMST 
TIMCLR 
XSB 
START 
0 
0 
0 
0 
0 


Sl 
1 
0 
0 
0 
0 


S2 
1 
0 
1 
0 
0 


S3 
1 
0 
1 
1 
0 
S4 
1 
0 
0 
1 
0 


S5 
1 
0 
1 
1 
1 


S6 
1 
0 
1 
0 
1 


S7 
0 
1 
1 
0 
0 


% TRANSITION 
STATEMENTS 
% 


START: Sl 
% From power up, go to Sl right away % 
Sl: 
IF COND1 
THEN S2 
% If write 20, go to next state 
% 
S2: 
IF /COND1 
THEN S3 
% Until not write 20, hold 
% 
IF CLR 
THEN Sl 


S3: 
IF COND1 
THEN S4 
% If another write 20, start timer 
% 
IF COND3 
THEN S7 
% If write other than 20, error 
% 
IF CLR 
THEN Sl 


S4: 
S5 
% Trigger timer then go to S5 loop 
% 
S5: 
IF COND2 
THEN S6 
% If write AO, stop timer 
% 
IF TIMEOUT 
THEN S7 
% If timer times out, 


go to error state 
% 
IF COND4 
THEN S7 
% If write other than AO, error 
% 
S6: 
Sl 
% Stop timer and go back to Sl 
% 
S7: 
IF CLR 
THEN Sl 
% Error state. wait for a RESET. 
% 


END$ 


EPLDPlnout 
5AC312 


Vcc 


TIMCLR 


TIMST 


LED 


Vpp 


GND 


GND 


GND 


GND 


AHR 


RESET 


TIMER_IN 


• not programming all bytes to 00 data prior to erasure; 


• not observing the 6 ,...S set-up times between programming or erasure and verification; 


• attempting to program before Vpp is at 12V (Capacitive Load) 
• not latching the erase verify address with the erase verify command, or changing the address on the subsequent 
read cycle; 


Chapters three and four discuss the correct methods of developing and debugging code to diminish the possibility of 
making these mistakes. 
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Intel's ETOX (EPROM tunnel oxide) Flash Memory 
adds electrical chip erasure and reprogramming 
to 
EPROM non-volatility and ease of use. Advances in 
tunnel oxides and photolithography have made it possi- 
ble to develop a double-polysilicon single-transistor 
read/write random access nonvolatile memory, capable 
of greater than 100,000 reprogramming 
cycles. Intel 
Flash Memory electrically erases all bits in the array 
matrix via electron tunneling. The EPROM program- 
ming mechanism of hot electron injection is employed 
for electrical byte programming. 


A command port interface, internal margin voltage 
generation, power up/down protection and address and 
data latches augment standard 
EPROM circuitry to 
optimize Intel's Flash Memory for microprocessor-con- 
trolled reprogramming. 


Read timing parameters on Intel's 28F256A, 28F512, 
28FOIO and 28F020 are equivalent to those of CMOS 
EPROMs, EEPROMs, and SRAMs. Access times as 
fast as 65 ns result from a memory cell current of ap- 
proximately 50 JLA, low resistance poly-silicide word- 
lines, advanced scaled periphery transistors, and an op- 
timized data-out buffer. 


Intel's ETOX flash memory technology is derived from 
its standard CMOS EPROM process base. Using ad- 
vanced 1.0 JLm and 0.8 JLm double-polysilicon n-well 
CMOS technology, Intel Flash Memory employs a 
3.8 JLm x 4.0 JLm single transistor cell (1.0 JLm) technol- 
ogy and a 2.5 JLm x 2.9 JLm single transistor 
cell 


(0.8 JLm technology), affording equivalent array denSIty 
as comparable EPROM technology. The flash memory 
cell structure is identical to the EPROM structure, ex- 
cept for the thinner gate (tunnel) oxide. Figure I com- 
pares the flash memory cell to the EPROM cell. 


High quality tunnel oxide under the single floating 
polysilicon gate promotes electrical erasure. All cells in 
the 
array 
are 
simultaneously 
erased 
via 
Fowler- 
Nordheim tunneling. Applying 12V on the source junc- 
tions and grounding the select gates erases the entire 
array in one second (typical). Programming is accom- 
plished with the standard EPROM mechanism of hot 
electron injection from the cell drain junction to the 
floating gate. Programming is initiated by bringing both 
the select gate and the cell drain to high voltage. Pro- 
gramming occurs at a rate of 10 JLspulses per byte. 
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One feature which differentiates Intel's Flash Memory 
is the command port architecture, illustrated in Figure 
2. 


The command port simplifies microprocessor control of 
the erase, erase verify, program, program verify, and 
read operations, without the need for additional control 
pins or the multiplexing of high voltage with ~~nt~ol 
functions. On-chip address and data latches mInImIZe 
system interface logic and free the system bus during 
erase and program operations. High voltage (12V) on 
the Vpp pin enables the command port. In the absence 
of this high voltage, the command port defaults to the 
read operation, inhibiting erasure or programming of 
the device. 
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The command port consists of a command register, 
command decoder and state latch, the data-in latch, 
and the address latch. The command decoder output 
directs the operation of the high voltage flash-erase 
switch, program voltage generator, and the erase/pro- 
gram verify voltage generator. 


Functions are selected via the command port in a mi- 
croprocessor write cycle controlled by the Chip-Enable 
and Write-Enable pins. Contents of the address latch 
are updated on the falling edge of Write-Enable. The 
rising edge of Write-Enable latches the command and 
data registers, and initiates operations. 


Erasure 
is achieved 
through 
a two-step 
write sequence. 


The erase set-up 
code is written 
to the command 
regis- 
ter in the 
first 
cycle. 
The 
erase 
confirmation 
code 
is 


written 
in the second 
cycle. The rising edge of this sec- 


ond 
Write-Enable 
pulse 
initiates 
the 
erase 
operation. 
The command 
decoder 
triggers 
the high voltage 
flash- 
erase switch, 
connecting 
the 
12V supply 
to the source 


of all bits in the array, 
while all wordlines 
are ground- 


ed. Fowler-Nordheim 
tunneling 
results 
in the simulta- 


neous 
erasure 
of all bits. 


The array 
source 
switch, 
shown 
in Figure 
3, switches 


high voltage 
onto the source junctions. 
During 
erasure, 
the high 
voltage 
latch 
formed 
by Ms 
through 
Mg en- 


ables 
transistor 
MIS. 
Transistor 
MIS 
pulls 
the 
array 


source 
up to 12V. Transistor 
M16 pulls 
the source 
to 
ground 
during 
read and program 
operations. 


To obtain 
fast erase times, 
the device must 
supply 
the 
grounded 
gate breakdown 
current 
which 
occurs 
on the 


sources 
of the memory 
array. 
The upper 
boundary 
for 


current 
sourcing 
capability 
of MIS is set by the maxi- 
mum 
allowable 
substrate 
current. 
If Vpp 
is raised 
to 


12V before 
VCC is above 
approximately 
1.8V, the low 
Vcc 
detect 
circuit 
formed 
by transistors 
M I to M.! 
drives 
the node 
LOW 
VCC to 9V. Transistors 
M9 to 
M 11 then 
force the erase circuit 
into a non-erase 
state 
with MIS off and MI6 on, When 
Vcc 
rises above 
1.8V, 


the chip will be reset into the read state. 


Writing 
the erase verify code into the command 
register 


terminates 
erasure, 
latches 
the address 
of the byte 
to 
verify, 
and 
sets the 
internally-generated 
erase 
margin 


voltage. 
The 
microprocessor 
then 
accesses 
the output 


from 
the addressed 
byte 
using 
standard 
read 
timings. 


The verify procedure 
repeats 
for all addresses. 
Should 
a 
byte require 
more time to reach the erased 
state, anoth- 
er erase operation 
is applied. 
The erase and verify oper- 


ations 
continue 
until 
the entire 
array 
is erased. 


Programming 
follows 
a similar 
flow. The program 
set- 
up command 
is written 
to the command 
register 
on the 


first cycle. The second 
cycle loads the address 
and data 
latches. 
The 
rising 
edge 
of the 
second 
Write-Enable 
pulse initiates 
programming 
by applying 
high voltage to 


the gates and drains 
of the bits to be programmed. 


Writing 
the 
program 
verify 
command 
to the 
register 


terminates 
the programming 
operation 
and applies 
the 


program 
verify voltage 
to the newly programmed 
byte. 


Again, 
the addressed 
byte can be read 
using 
standard 


microprocessor 
read timings. 
Should 
the addressed 
byte 


require 
more 
time to reach 
the programmed 
state, 
the 


programming 
operation 
and 
verification 
are 
repeated 


until the byte is programmed. 


Erase 
and program 
verification 
ensure 
the data 
reten- 


tion of the newly altered 
memory 
bits. The cell margin- 


ing performed 
in the 
Quick-Pulse 
Programming 
and 


Quick-Erase 
algorithms 
is more reliable 
than 
historical 


overpulsing 
schemes 
as margining 
tests the amount 
of 


charge 
stored 
on the floating 
gate. 


Intel's 
28F256A 
through 
28F020 
Flash 
Memories 
em- 


ploy a unique 
circuit 
to internally 
generate 
the 
erase 


and program 
verify voltages. 
Figure 
4 shows 
a simpli- 


fied version 
of the circuit. 
The circuit 
consists 
of a high 
voltage 
switch 
and the verify voltage 
generator. 
Tran- 


sistors 
M 1 through 
M4 
constitute 
the 
high 
voltage 


switch 
which 
disconnects 
Vpp from 
the resistor 
when 


the device is not in the verify mode. 
The verify voltage 


generator 
includes 
a resistor 
divider 
and a buffer. 
Inter- 


nal margin 
voltage 
generation 
maintains 
microproces- 


sor compatibility 
by eliminating 
the need for external 


reference 
voltages. 


One of the most significant 
aspects 
of Intel Flash 
Mem- 


ory is its capability 
for greater 
than 
100,000 erase/pro- 


gram 
cycles. 
Destructive 
oxide breakdown 
has been a 


limiting 
factor 
in 
extended 
cycling 
of 
thin 
oxide 


EEPROMs. 
Intel's 
ETOX 
flash 
memory 
technology 


extends 
cycling performance 
through: 
improved 
tunnel 


oxide processing 
that increases 
charge 
carrying 
capabil- 


ity ten-fold; 
reduced 
oxide area under 
stress minimizing 


probability 
of oxide defects 
in the region; 
and reduced 


oxide 
stress 
due 
to a lower 
peak 
electric 
field (lower 


erase voltage 
than 
EEPROM). 


A typical cell erase/program margin (Vt) is shown as a 
function of reprogramming 
cycles in Figure 5. After 
100,000 reprogramming cycles, a 2.5V program read 
margin exists, ensuring reliable data retention. 


Reliable erase/program cycling also requires proper se- 
lection of the erase Vt maximum and maintenance of a 
tight Vt distribution. The maximum erased Vt is set to 
3.2V via the erase algorithm and the internal erase veri- 
fy circuits. Superior oxide quality gives an erased Vt 
distribution width that improves slightly with cycling 
(Figure 6). The tight erase Vt distribution gives an or- 
der of magnitude of erase time margin to the fastest 
erasing cell (Figure 7). 


Intel's 
ETOX flash memory technology is a break- 
through in adding electrical chip-erasure to high-densi- 
ty EPROM technology. Intel's CMOS Flash Memory 
offers the most cost-effective and reliable alternative for 
read/write random access non-volatile memory. Micro- 
processor-compatible specifications, straightforward in· 
terfacing, and in circuit alterability allow designers to 
easily augment memory flexibility and satisfy the need 
for nonvolatile storage in today's designs. 
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Figure 6. Erase Vt Distribution 
vs Cycling 
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Figure 14. Flash Memory 
Pinouts 


Columns are number 0 through 511 beginning with the column nearest the X-decoder. 
Outputs are grouped as follows: 


Left Half Array 
Right Half Array 


Array Organization: 
100 101 102 103 
104 105 106 107 
BL384 ..- 
BLo 
BLo- 
BL384 


Address 
Bltllnes 


A14 
A12 
Al0 
A2 
Al 
Ao 
A3 
100& 107 
101 & 106 
102& 105 
103& 104 
0 
0 
0 
0 
0 
0 
0 
BL384 
BL256 
BL128 
BLo 
0 
0 
0 
0 
0 
0 
1 
BL385 
BL257 
BL129 
BL1 
0 
0 
0 
0 
0 
1 
0 
BL386 
BL258 
BL130 
BL2 


0 
0 
0 
0 
0 
1 
1 
BL387 
BL259 
BL131 
BL3 
0 
0 
0 
0 
1 
0 
0 
BL388 
BL260 
BL132 
BL4 
0 
0 
0 
0 
1 
0 
1 
BL389 
BL261 
BL133 
BL5 


0 
0 
0 
0 
1 
1 
0 
BL390 
BL262 
BL134 
BLe 
0 
0 
0 
0 
1 
1 
1 
BL391 
BL263 
BL135 
BL7 
• 
• 
• 
• 
• 
• 
• 
• 
• 
• 
• 


1 
1 
1 
1 
1 
0 
0 
BL508 
BL380 
BL252 
BL124 
1 
1 
1 
1 
1 
0 
1 
BL509 
BL381 
BL253 
BL125 
1 
1 
1 
1 
1 
1 
0 
BL510 
BL382 
BL254 
BL126 
1 
1 
1 
1 
1 
1 
1 
BL511 
BL383 
BL255 
BL127 


X Address 
Row 


A7 
A6 
As 
A4 
A13 
All 
Ag 
A8 
WL 


0 
0 
0 
0 
0 
0 
0 
0 
XLo 
0 
0 
0 
0 
0 
0 
0 
1 
XL1 
0 
0 
0 
0 
0 
0 
1 
0 
XL2 
0 
0 
0 
0 
0 
0 
1 
1 
XL3 
0 
0 
0 
0 
0 
1 
0 
0 
XL4 
0 
0 
0 
0 
0 
1 
0 
1 
XL5 
0 
0 
0 
0 
0 
1 
1 
0 
XLe 
0 
0 
0 
0 
0 
1 
1 
1 
XL7 
0 
0 
0 
0 
1 
0 
0 
0 
XLa 
0 
0 
0 
0 
1 
0 
0 
1 
XL9 
0 
0 
0 
0 
1 
0 
1 
0 
XL10 
0 
0 
0 
0 
1 
0 
1 
1 
XL11 
0 
0 
0 
0 
1 
1 
0 
0 
XL12 
0 
0 
0 
0 
1 
1 
0 
1 
XL13 
0 
0 
0 
0 
1 
1 
1 
0 
XL14 
0 
0 
0 
0 
1 
1 
1 
1 
XL15 
0 
0 
0 
1 
1 
1 
1 
1 
XL16 
0 
0 
0 
1 
1 
1 
1 
0 
XL17 
0 
0 
0 
1 
1 
1 
0 
1 
XL18 
0 
0 
0 
1 
1 
1 
0 
0 
XL19 
0 
0 
0 
1 
1 
0 
1 
1 
XL20 
0 
0 
0 
1 
1 
0 
1 
0 
XL21 
0 
0 
0 
1 
1 
0 
0 
1 
XL22 
0 
0 
0 
1 
1 
0 
0 
0 
XL23 
0 
0 
0 
1 
0 
1 
1 
1 
XL24 
0 
0 
0 
1 
0 
1 
1 
0 
XL25 
0 
0 
0 
1 
0 
1 
0 
1 
XL26 
0 
0 
0 
1 
0 
1 
0 
0 
XL27 
0 
0 
0 
1 
0 
0 
1 
1 
XL28 


0 
0 
0 
1 
0 
0 
1 
0 
XL29 


0 
0 
0 
1 
0 
0 
0 
1 
XL30 


0 
0 
0 
1 
0 
0 
0 
0 
XL31 


• 


~- ---- ~-- 
MOW 


A7 
A6 
As 
A4 
A13 
A11 
Ag 
As 
WL 


0 
0 
1 
0 
0 
0 
0 
0 
XL32 
• 
• 
• 
• 
• 
• 
• 
• 
••• 
0 
0 
1 
0 
1 
1 
1 
1 
XL47 


0 
0 
1 
1 
1 
1 
1 
1 
XL48 
• 
• 
• 
• 
• 
• 
• 
• 
••• 
0 
0 
1 
1 
0 
0 
0 
0 
XL63 


0 
1 
0 
0 
0 
0 
0 
0 
XL64 


• 
• 
• 
• 
• 
• 
• 
• 
••• 
0 
1 
0 
0 
1 
1 
1 
1 
XL79 


0 
1 
0 
1 
1 
1 
1 
1 
XL80 
• 
• 
• 
• 
• 
• 
• 
• 
••• 
0 
1 
0 
1 
0 
0 
0 
0 
XL95 


1 
1 
1 
0 
0 
0 
0 
0 
XL234 


• 
• 
• 
• 
• 
• 
• 
• 
••• 
1 
1 
1 
0 
1 
1 
1 
1 
XL249 


1 
1 
1 
1 
1 
1 
1 
1 
XL250 
• 
• 
• 
• 
• 
• 
• 
• 
••• 
1 
1 
1 
1 
0 
0 
0 
0 
XL255 


Bit Map for 
One Output 


WLO 
WL1 
WL2 
WL3 
S 
E 
1/00 1/01 1/02 1/03 
L 
E 
C 
T 
S 


WL252 
WL253 
WL254 
WL255 


Left Half Array 
Right Half Array 
00 
01 
02 
03 
04 
05 
06 
07 


Address 
Bitlines 


A14 
A15 
A3 
A10 
A2 
A1 
AO 
100/7 
101/06 
102/05 
103/04 


0 
0 
0 
0 
0 
0 
0 
BL384 
BL256 
BL128 
BLO 
0 
0 
1 
0 
0 
0 
0 
BL385 
BL257 
BL129 
Bl1 
0 
0 
0 
0 
0 
0 
1 
BL386 
BL258 
BL130 
BL2 
0 
0 
1 
0 
0 
0 
1 
BL387 
BL259 
BL 131 
BL3 
0 
0 
0 
0 
0 
1 
0 
BL388 
BL260 
BL132 
BL4 
0 
0 
1 
0 
0 
1 
0 
BL389 
BL261 
BL133 
BL5 
0 
0 
0 
0 
0 
1 
1 
BL390 
BL262 
BL134 
BL6 
0 
0 
1 
0 
0 
1 
1 
BL391 
BL263 
BL135 
BL7 
• 
• 
• 
• 
• 
• 
• 
• 
• 
• 
• 
1 
1 
0 
1 
1 
1 
0 
BL508 
BL380 
BL252 
BL124 
1 
1 
1 
1 
1 
1 
0 
BL509 
BL381 
BL253 
BL125 
1 
1 
0 
1 
1 
1 
1 
BL510 
BL382 
BL254 
BL126 
1 
1 
1 
1 
1 
1 
1 
BL511 
BL383 
BL255 
BL127 


X Address 
Row 


A12 
A7 
A6 
A5 
A4 
A13 
A11 
A9 
AS 
WL 


0 
0 
0 
0 
0 
0 
0 
0 
0 
XLO 
0 
0 
0 
0 
0 
0 
0 
0 
1 
XL1 
0 
0 
0 
0 
0 
0 
0 
1 
0 
XL2 
0 
0 
0 
0 
0 
0 
0 
1 
1 
XL3 
0 
0 
0 
0 
0 
0 
1 
0 
0 
XL4 
0 
0 
0 
0 
0 
0 
1 
0 
1 
XL5 
0 
0 
0 
0 
0 
0 
1 
1 
0 
XL6 
0 
0 
0 
0 
0 
0 
1 
1 
1 
XL7 
0 
0- 
0 
0 
0 
1 
0 
0 
0 
XL8 
0 
0 
0 
0 
0 
1 
0 
0 
1 
XL9 
0 
0 
0 
0 
0 
1 
0 
1 
0 
XL10 
0 
0 
0 
0 
0 
1 
0 
1 
1 
XL11 
0 
0 
0 
0 
0 
1 
1 
0 
0 
XL12 
0 
0 
0 
0 
0 
1 
1 
0 
1 
XL13 
0 
0 
0 
0 
0 
1 
1 
1 
0 
XL14 
0 
0 
0 
0 
0 
1 
1 
1 
1 
XL15 
0 
0 
0 
0 
1 
1 
1 
1 
1 
XL16 
0 
0 
0 
0 
1 
1 
1 
1 
0 
XL17 
0 
0 
0 
0 
1 
1 
1 
0 
1 
XL18 
0 
0 
0 
0 
1 
1 
1 
0 
0 
XL19 
0 
0 
0 
0 
1 
1 
0 
1 
1 
XL20 
0 
0 
0 
0 
1 
1 
0 
1 
0 
XL21 
0 
0 
0 
0 
1 
1 
0 
0 
1 
XL22 
0 
0 
0 
0 
1 
1 
0 
0 
0 
XL23 
0 
0 
0 
0 
1 
0 
1 
1 
1 
XL24 
0 
0 
0 
0 
1 
0 
1 
1 
0 
XL25 
0 
0 
0 
0 
1 
0 
1 
0 
1 
Xl26 
0 
0 
0 
0 
1 
0 
1 
0 
0 
XL27 
0 
0 
0 
0 
1 
0 
0 
1 
1 
XL28 
0 
0 
0 
0 
1 
0 
0 
1 
0 
XL29 
0 
0 
0 
0 
1 
0 
0 
0 
1 
XL30 
0 
0 
0 
0 
1 
0 
0 
0 
0 
XL31 


X Address 
Row 


A12 
A7 
A6 
AS 
A4 
A13 
A11 
A9 
AS 
WL 


0 
0 
0 
1 
0 
0 
0 
0 
0 
XL32 
• 
• 
• 
• 
• 
• 
• 
• 
• 
• 
0 
0 
0 
1 
0 
1 
1 
1 
1 
XL47 


0 
0 
0 
1 
1 
1 
1 
1 
1 
XL48 
• 
• 
• 
• 
• 
• 
• 
• 
• 
• 
0 
0 
0 
1 
1 
0 
0 
0 
0 
XL63 


0 
0 
1 
0 
0 
0 
0 
0 
0 
XL64 


• 
• 
• 
• 
• 
• 
• 
• 
• 
• 
0 
0 
1 
0 
0 
1 
1 
1 
1 
XL79 


0 
0 
1 
0 
1 
1 
1 
1 
1 
XL80 
• 
• 
• 
• 
• 
• 
• 
• 
• 
• 
0 
0 
1 
0 
1 
0 
0 
0 
0 
XL95 


1 
1 
1 
1 
0 
0 
0 
0 
0 
XL480 
• 
• 
• 
• 
• 
• 
• 
• 
• 
• 
1 
1 
1 
1 
0 
1 
1 
1 
1 
XL495 


1 
1 
1 
1 
1 
1 
1 
1 
1 
XL496 
• 
• 
• 
• 
• 
• 
• 
• 
• 
• 
1 
1 
1 
1 
1 
0 
0 
0 
0 
XL511 


Bitmapfor 
One Output 


WLO 
WL1 
WL2 
WL3 


S 
E 
1/00 
1/01 
1/02 
1/03 


L 
E 
C 
T 
S 


WL508 
WL509 
WL510 
WL511 


Column Selects 
Figure 20. 2SF512 Bit Map 


Columns are number 0 through 511 beginning with the column nearest the X-decoder. 
Outputs are grouped as follows: 


Left Half Array 
Right Half Array 
Array Organization: 
100 101 102 103 
104 105 106 107 


BL384 +- Blo 
Blo-+ 
BL384 


Address 
Bltllnes 


A16 
A1S 
A10 
A2 
A1 
Ao 
A3 
100& 107 
101 & 106 
102&105 
103& 104 


0 
0 
0 
0 
0 
0 
0 
BL384 
BL256 
BL128 
BLo 
0 
0 
0 
0 
0 
0 
1 
BL38S 
BL257 
BL129 
BL1 
0 
0 
0 
0 
0 
1 
0 
BL386 
BL2S8 
BL130 
BL2 
0 
0 
0 
0 
0 
1 
1 
BL387 
BL259 
BL131 
BL3 
0 
0 
0 
0 
1 
0 
0 
BL388 
BL260 
BL132 
B4 
0 
0 
0 
0 
1 
0 
1 
BL389 
BL261 
BL133 
BL5 
0 
0 
0 
0 
1 
1 
0 
BL390 
BL262 
BL134 
B~ 
0 
0 
0 
0 
1 
1 
1 
BL391 
BL263 
BL135 
BL7 
• 
• 
• 
• 
• 
• 
• 
• 
• 
• 
• 
1 
1 
1 
1 
1 
0 
0 
BL508 
BL380 
BL252 
BL124 
1 
1 
1 
1 
1 
0 
1 
BL509 
BL381 
BL253 
BL125 
1 
1 
1 
1 
1 
1 
0 
BL510 
BL382 
BL254 
BL126 
1 
1 
1 
1 
1 
1 
1 
BL511 
BL383 
BL255 
BL127 


X Address 
Row 


A14 
A12 
A7 
A6 
As 
A4 
A13 
A11 
Ag 
A8 
WL 


0 
0 
0 
0 
0 
0 
0 
0 
0 
0 
XLo 
0 
0 
0 
0 
0 
0 
0 
0 
0 
1 
XL1 
0 
0 
0 
0 
0 
0 
0 
0 
1 
0 
XL2 
0 
0 
0 
0 
0 
0 
0 
0 
1 
1 
XL3 
0 
0 
0 
0 
0 
0 
0 
1 
0 
0 
X4 
0 
0 
0 
0 
0 
0 
0 
1 
0 
1 
XL5 
0 
0 
0 
0 
0 
0 
0 
1 
1 
0 
X~ 
0 
0 
0 
0 
0 
0 
0 
1 
1 
1 
XL7 
0 
0 
0 
0 
0 
0 
1 
0 
0 
0 
XLe 
0 
0 
0 
0 
0 
0 
1 
0 
0 
1 
XL9 
0 
0 
0 
0 
0 
0 
1 
0 
1 
0 
XL10 
0 
0 
0 
0 
0 
0 
1 
0 
1 
1 
XL11 
0 
0 
0 
0 
0 
0 
1 
1 
0 
0 
XL12 
0 
0 
0 
0 
0 
0 
1 
1 
0 
1 
XL13 
0 
0 
0 
0 
0 
0 
1 
1 
1 
0 
XL14 
0 
0 
0 
0 
0 
0 
1 
1 
1 
1 
XL15 
0 
0 
0 
0 
0 
1 
1 
1 
1 
1 
XL16 
0 
0 
0 
0 
0 
1 
1 
1 
1 
0 
XL17 
0 
0 
0 
0 
0 
1 
1 
1 
0 
1 
XL18 
0 
0 
0 
0 
0 
1 
1 
1 
0 
0 
XL19 
0 
0 
0 
0 
0 
1 
1 
0 
1 
1 
XL20 
0 
0 
0 
0 
0 
1 
1 
0 
1 
0 
XL21 
0 
0 
0 
0 
0 
1 
1 
0 
0 
1 
XL22 
0 
0 
0 
0 
0 
1 
1 
0 
0 
0 
XL23 
0 
0 
0 
0 
0 
1 
0 
1 
1 
1 
XL24 
0 
0 
0 
0 
0 
1 
0 
1 
1 
0 
XL25 
0 
0 
0 
0 
0 
1 
0 
1 
0 
1 
XL26 
0 
0 
0 
0 
0 
1 
0 
1 
0 
0 
XL27 
0 
0 
0 
0 
0 
1 
0 
0 
1 
1 
XL28 
0 
0 
0 
0 
0 
1 
0 
0 
1 
0 
XL29 
0 
0 
0 
0 
0 
1 
0 
0 
0 
1 
XL30 
0 
0 
0 
0 
0 
1 
0 
0 
0 
0 
XL31 


• 


intel~ 


X Address 
Row 


A14 
A12 
A7 
As 
As 
A4 
A13 
All 
Ag 
As 
WL 


0 
0 
0 
0 
1 
0 
0 
0 
0 
0 
XL32 
• 
• 
• 
• 
• 
• 
• 
• 
• 
• 
••• 
0 
0 
0 
0 
1 
0 
1 
1 
1 
1 
XL47 


0 
0 
0 
0 
1 
1 
1 
1 
1 
1 
XL48 
• 
• 
• 
• 
• 
• 
• 
• 
• 
• 
••• 
0 
0 
0 
0 
1 
1 
0 
0 
0 
0 
XL63 


0 
0 
0 
1 
0 
0 
0 
0 
0 
0 
XL64 
• 
• 
• 
• 
• 
• 
• 
• 
• 
• 
••• 
0 
0 
0 
1 
0 
0 
1 
1 
1 
1 
XL79 


0 
0 
0 
1 
0 
1 
1 
1 
1 
1 
XL80 
• 
• 
• 
• 
• 
• 
• 
• 
• 
• 
••• 
0 
0 
0 
1 
0 
1 
0 
0 
0 
0 
XL95 


1 
1 
1 
1 
1 
0 
0 
0 
0 
0 
XL992 
• 
• 
• 
• 
• 
• 
• 
• 
• 
• 
••• 
1 
1 
1 
1 
1 
0 
1 
1 
1 
1 
XL1007 


1 
1 
1 
1 
1 
1 
1 
1 
1 
1 
XL1008 
• 
• 
• 
• 
• 
• 
• 
• 
• 
• 
••• 
1 
1 
1 
1 
1 
1 
0 
0 
0 
0 
XL1023 


Bit Map for 
One Output 


WLO 
WL1 
WL2 
WL3 
S 
E 
1/00 1/01 1/02 1/03 
L 
E 
C 
T 
S 


WL1020 
WL1021 
WL1022 
WL1023 


Columns are number 0 through 511 beginning with the column nearest the X-decoder. 
Outputs are grouped as follows: 


Left Half Array 
Right Half Array 
Array Organization: 
100 101 102 103 
104 105 106 107 
BL384 +- BLa 
BLa --+ BL384 


Address 
Bltllnes 


A16 
A1S 
A10 
A2 
A1 
Ao 
A3 
100& 107 
101 & 106 
102& 105 
103& 104 
0 
0 
0 
0 
0 
0 
0 
Bl384 
Bl256 
Bl128 
BLa 
0 
0 
0 
0 
0 
0 
1 
Bl385 
Bl257 
Bl129 
Bl1 
0 
0 
0 
0 
0 
1 
0 
Bl386 
Bl258 
Bl130 
Bl2 
0 
0 
0 
0 
0 
1 
1 
Bl387 
Bl259 
Bl131 
Bl3 
0 
0 
0 
0 
1 
0 
0 
Bl388 
Bl260 
Bl132 
B4 
0 
0 
0 
0 
1 
0 
1 
Bl389 
Bl261 
Bl133 
Bl5 
0 
0 
0 
0 
1 
1 
0 
Bl390 
Bl262 
Bl134 
BLa 
0 
0 
0 
0 
1 
1 
1 
Bl391 
Bl263 
Bl135 
Bl7 
• 
• 
• 
• 
• 
• 
• 
• 
• 
• 
• 
1 
1 
1 
1 
1 
0 
0 
Bl508 
Bl380 
Bl252 
Bl124 


1 
1 
1 
1 
1 
0 
1 
Bl509 
Bl381 
Bl253 
Bl125 
1 
1 
1 
1 
1 
1 
0 
Bl510 
Bl382 
Bl254 
Bl126 
1 
1 
1 
1 
1 
1 
1 
Bl511 
Bl383 
Bl255 
Bl127 


X Address 
Row 


A17 
A14 
A12 
A7 
A6 
As 
A4 
A13 
A11 
Ag 
A8 
WL 
0 
0 
0 
0 
0 
0 
0 
0 
0 
0 
0 
XLa 
0 
0 
0 
0 
0 
0 
0 
0 
0 
0 
1 
Xl1 
0 
0 
0 
0 
0 
0 
0 
0 
0 
1 
0 
Xl2 
0 
0 
0 
0 
0 
0 
0 
0 
0 
1 
1 
Xl3 
0 
0 
0 
0 
0 
0 
0 
0 
1 
0 
0 
X4 
0 
0 
0 
0 
0 
0 
0 
0 
1 
0 
1 
Xl5 
0 
0 
0 
0 
0 
0 
0 
0 
1 
1 
0 
XLa 
0 
0 
0 
0 
0 
0 
0 
0 
1 
1 
1 
Xl7 
0 
0 
0 
0 
0 
0 
0 
1 
0 
0 
0 
Xl8 
0 
0 
0 
0 
0 
0 
0 
1 
0 
0 
1 
Xl9 
0 
0 
0 
0 
0 
0 
0 
1 
0 
1 
0 
Xl10 
0 
0 
0 
0 
0 
0 
0 
1 
0 
1 
1 
Xl11 


0 
0 
0 
0 
0 
0 
0 
1 
1 
0 
0 
Xl12 
0 
0 
0 
0 
0 
0 
0 
1 
1 
0 
1 
Xl13 


0 
0 
0 
0 
0 
0 
0 
1 
1 
1 
0 
Xl14 


0 
0 
0 
0 
0 
0 
0 
1 
1 
1 
1 
Xl15 
0 
0 
0 
0 
0 
0 
1 
1 
1 
1 
1 
Xl16 
0 
0 
0 
0 
0 
0 
1 
1 
1 
1 
0 
Xl17 


0 
0 
0 
0 
0 
0 
1 
1 
1 
0 
1 
Xl18 
0 
0 
0 
0 
0 
0 
1 
1 
1 
0 
0 
Xl19 
0 
0 
0 
0 
0 
0 
1 
1 
0 
1 
1 
Xl20 
0 
0 
0 
0 
0 
0 
1 
1 
0 
1 
0 
Xl21 


0 
0 
0 
0 
0 
0 
1 
1 
0 
0 
1 
Xl22 
0 
0 
0 
0 
0 
0 
1 
1 
0 
0 
0 
Xl23 
0 
0 
0 
0 
0 
0 
1 
0 
1 
1 
1 
Xl24 
0 
0 
0 
0 
0 
0 
1 
0 
1 
1 
0 
Xl25 
0 
0 
0 
0 
0 
0 
1 
0 
1 
0 
1 
Xl26 
0 
0 
0 
0 
0 
0 
1 
0 
1 
0 
0 
Xl27 
0 
0 
0 
0 
0 
0 
1 
0 
0 
1 
1 
Xl28 
0 
0 
0 
0 
0 
0 
1 
0 
0 
1 
0 
Xl29 
0 
0 
0 
0 
0 
0 
1 
0 
0 
0 
1 
Xl30 
0 
0 
0 
0 
0 
0 
1 
0 
0 
0 
0 
Xl31 


• 


intel~ 


X Address 
Row 


A17 
A14 
A12 
A7 
A6 
As 
A4 
A13 
A11 
Ag 
AS 
WL 


0 
0 
0 
0 
0 
1 
0 
0 
0 
0 
0 
XL32 


• 
• 
• 
• 
• 
• 
• 
• 
• 
• 
• 
••• 


0 
0 
0 
0 
0 
1 
0 
1 
1 
1 
1 
XL47 


0 
0 
0 
0 
0 
1 
1 
1 
1 
1 
1 
XL48 


• 
• 
• 
• 
• 
• 
• 
• 
• 
• 
• 
••• 


0 
0 
0 
0 
0 
1 
1 
0 
0 
0 
0 
XL63 


0 
0 
0 
0 
1 
0 
0 
0 
0 
0 
0 
XL64 


• 
• 
• 
• 
• 
• 
• 
• 
• 
• 
• 
••• 


0 
0 
0 
0 
1 
0 
0 
1 
1 
1 
1 
XL79 


0 
0 
0 
0 
1 
0 
1 
1 
1 
1 
1 
XL80 


• 
• 
• 
• 
• 
• 
• 
• 
• 
• 
• 
••• 


0 
0 
0 
0 
1 
0 
1 
0 
0 
0 
0 
XL95 


0 
1 
1 
1 
1 
1 
0 
0 
0 
0 
0 
XL992 


• 
• 
• 
• 
• 
• 
• 
• 
• 
• 
• 
••• 


0 
1 
1 
1 
1 
1 
0 
1 
1 
1 
1 
XL1007 


0 
1 
1 
1 
1 
1 
1 
1 
1 
1 
1 
XL1008 


• 
• 
• 
• 
• 
• 
• 
• 
• 
• 
• 
••• 


0 
1 
1 
1 
1 
1 
1 
0 
0 
0 
0 
XL1023 


1 
1 
1 
1 
1 
1 
1 
0 
0 
0 
0 
XL2016 


• 
• 
• 
• 
• 
• 
• 
• 
• 
• 
• 
••• 


1 
1 
1 
1 
1 
1 
0 
1 
1 
1 
1 
XL2031 


1 
1 
1 
1 
1 
1 
1 
1 
1 
1 
1 
XL2032 


• 
• 
• 
• 
• 
• 
• 
• 
• 
• 
• 
••• 


1 
1 
1 
1 
1 
1 
1 
0 
0 
0 
0 
XL2047 


Bit Map for 
One Output 


WLO 
WL1 
WL2 
WL3 
S 
E 
1/00 1/01 1/02 1/03 
L 
E 
C 
T 
S 


WL2043 
WL2045 
WL2046 
WL2047 


Intel Flash Memory Evaluation Kit II 
(D, FLASHEVAL2) Product Brief 


Kit _ 
(I) PC AT·/PC 
XT· Add-In 


Contents 
Driver Board with DIP ZIF 
Connector 


_ 
Sample 
Flash Memory 
Devices, 


Including: 


• 
(I) 28F256A 
• 
(I) 28FOIO 
• 
(I) 28FOOIBX·B 


• 
(I) 28FS12 
• 
(I) 28F020 
• 
(I) 28FOOIBX·T 


_ 
(I) 5.25" Floppy Disk with 


iFLASH2 
Software 


_ 
Technical 
Documentation 


Describing 
Intel's 
Flash 


Memory 
Products 
Intel's Flash Memory Evaluation Kit II provides the system designer with a 
cost-effective prototyping tool for programming and erasing Intel Flash 
Memory products. Its software upgrade capability enables Intel to provide 
programming support for new flash memories coincident with their 
introduction. The Flash Memory Evaluation Kit's modular design provides 
compatibility with future Intel flash memory packages and form factors 
through hardware adapter upgrade modules. This kit is a significant 
enhancemelllto 
the Intel Flash Memory Evaluation Kit I, adding supportfor 
new devices and providing new software with easy user interface, additional 
capabilities and on-line help. 


Kit Description 


The Intel Flash Memory Evaluation Kit II is a PC-driven flash memory 
programming 
solution. With this kit, a system designer can program and erase 
Intel's flash memory components directly, and flash memory cards, SIMMs and 
advance packaged components 
using separately available hardware adapters. 


The kit's Users Guide provides software and hardware installation instructions and 
an overview of software features. 


The provided iFLASH2 programming 
software incorporates a graphical, mouse- 


driven (optional) user interface. On-line help guides the user through the extensive 
kit capabilities 
without need to access instruction manuals. As new flash memories 
are introduced by Intel, software upgrades will update the installed customer base 
with the added code. 


Technical documentation 
includes device datasheets, application notes and 
reliability information. Together, these documents provide a complete description 
of the technology and important design considerations. 


intel. 


SMALL OUTLINE 
PACKAGE 
PHYSICAL 
DIMENSIONS 


32·Lead 
Thin Small Outline Package 
(TSOP)1 


A2i 
o 
n 
E 
o 


A J 
~ 
SEE 
DETAIL 
A 
Tjf---------'~ 


Millimeters - 
Inches 
Symbol 
Min 
Typ 
Max 
Mln 
Typ 
Max 


Package 
Height 
A 
1.20 
0.0472 


Standoff 
A1 
0.050 
0.0019 


Package 
Body Thickness 
A2 
0.96 
1.01 
1.06 
0.0378 
0.0398 
0.0417 


Lead Width 
B 
0.150 
0.200 
0.250 
0.0059 
0.0079 
0.0098 


Lead Thickness 
C 
0.10 
0.15 
0.20 
0.0039 
0.0059 
0.0079 


Package 
Body Length 
D 
18.35 
18.40 
18.45 
0.7224 
0.7244 
0.7264 


Package 
Body Width 
E 
7.95 
8.00 
8.05 
0.3130 
0.3150 
0.3169 


Pitch 
e 
0.50 
0.0196 


Terminal 
Dimension 
Hd 
19.90 
20.00 
20.10 
0.7835 
0.7874 
0.7913 


Lead Tip Angle 
</> 
1° 
3° 
5° 
1° 
3° 
5° 


Lead Tip Length 
L 
0.300 
0.330 
0.350 
0.0118 
0.0130 
0.0138 


Lead Count 
N 
32 
32 


NOTES: 


Gull Wing Length 
0.600 
0.800 
0.950 
0.0236 
0.0314 
0.0374 


Seating 
Plane Coplanarity 
0.100 
0.0039 


Lead to Package 
Offset 
0.20 
0.25 
0.30 
0.0079 
0.0098 
0.0118 


• 


40-Lead 
Thin Small Outline Package 
(TSOP) 1 


A2i 
-ltG 
o 


o 


Millimeters 
Inches 
Symbol 
Max 
Mln 
Typ 
Mln 
Typ 
Max 


Package 
Height 
A 
1.20 
0.0472 


Standoff 
A1 
0.050 
0.Q19 


Package 
Body Thickness 
A2 
0.965 
0.995 
1.025 
0.0379 
0.0391 
0.0403 


Lead Width 
B 
0.150 
0.20 
0.250 
0.0059 
0.0078 
0.0096 


Lead Thickness 
C 
0.120 
0.127 
0.134 
0.0046 
0.0049 
0.0052 


Package 
Body Length 
D 
18.20 
18.40 
18.60 
0.7165 
0.7244 
0.7322 


Package 
Body Width 
E 
9.80 
10.00 
10.20 
0.3858 
0.3937 
0.4015 


Pitch 
e 
0.50 
0.0196 


Terminal 
Dimension 
Hd 
19.80 
20.00 
20.20 
0.7795 
0.7874 
0.7952 


Lead Tip Angle 
</> 
1° 
3° 
5° 
1° 
3° 
5° 


Lead Tip Length 
L 
0.300 
0.330 
0.350 
0.0118 
0.0130 
0.0137 


Lead Count 
N 
40 
40 


NOTES: 


Gull Wing Length 
0.600 
0.800 
0.950 
0.0236 
0.0314 
0.0374 


Seating 
Plane Coplanarity 
0.100 
0.0039 


Lead to Package 
Offset 
0.20 
0.25 
0.30 
0.0079 
0.0098 
0.0118 


infel~ 


56-Lead 
Thin Small Outline 
Package 
(TSOP) 


A2f-- 


"56 
I 
o~ 
o 


o 
o 


A:::L-._------------- ..... 
~ 
SEE DETAil 
A 
-rj."""--------~ 


DETAil 
A'let 
l-H# 


MIllimeters 
Inches 


Symbol 


Mln 
Typ 
Max 
Mln 
Typ 
Max 


Package 
Height 
A 
1.20 
0.0472 


Standoff 
Al 
0.050 
0.0019 


Package 
Body Thickness 
A2 
0.965 
0.995 
1.025 
0.0379 
0.0391 
0.0403 


Lead Width 
B 
0.100 
0.150 
0.200 
0.0039 
0.0059 
0.0079 


Lead Thickness 
C 
0.120 
0.127 
0.134 
0.0047 
0.0049 
0.0053 


Package 
Body Length 
D 
18.20 
18.40 
18.60 
0.7165 
0.7244 
0.7322 


Package 
Body Width 
E 
13.80 
14.00 
14.20 
0.5433 
0.5511 
0.5590 


Pitch 
e 
0.50 
0.0196 


Terminal 
Dimension 
Hd 
19.80 
20.00 
20.20 
0.7795 
0.7874 
0.7952 


Lead Tip Angle 
</> 
1° 
3° 
5° 
1° 
3° 
5° 


Lead Tip Length 
L 
0.300 
0.330 
0.350 
0.0118 
0.0130 
0.0137 


Lead Count 
N 
56 
56 


NOTES: 


Gull Wing Length 
0.600 
0.800 
0.950 
0.0236 
0.0314 
0.0374 


Seating 
Plane Coplanarity 
0.100 
0.0039 


Lead to Package 
Offset 
0.20 
0.25 
0.30 
0.0079 
0.0098 
0.0118 


• 


o 


Symbol 
Millimeters 
Inches 


Mln 
Typ 
Max 
Mln 
Typ 
Max 


Package 
Height 
A 
2.62 
0.103 


Standoff 
A1 
0.13 
0.225 
0.35 
0.005 
0.009 
0.013 


Package 
Body Thickness 
A2 
2.17 
2.30 
2.45 
0.085 
0.091 
0.097 


Lead Width 
B 
0.35 
0.40 
0.50 
0.014 
0.016 
0.020 


Lead Thickness 
C 
0.13 
0.150 
0.20 
0.005 
0.006 
0.008 


Package 
Body Length 
D 
28.20 
28.70 
1.100 
1.130 


Package 
Body Width 
E 
13.10 
13.30 
13.50 
0.516 
0.524 
0.531 


Pitch 
e 
1.27 
0.050 


Terminal 
Dimension 
He 
15.70 
16.00 
16.30 
0.618 
0.630 
0.642 


Lead Tip Angle 
4> 
8' 
8' 


Lead Tip Length 
L1 
0.75 
0.80 
0.85 
0.029 
0.032 
0.033 


Lead Count 
N 
44 
44 


NOTES: 


Gull Wing Length 
1.30 
1.35 
1.40 
0.051 
0.053 
0.055 


Seating 
Plane Coplanarity 
I 
0.10 
0.004 


20.8(819) ----------1 


c:J 
c:J 
c:J 
I ~ 
c:J ---1.. ;:. 
c:J-' ~ 
c:J 
I.:::!. 


c:J 
c:J 
c:J 
c:J 
0 
c:J~~ 
c:J-.-=- 
c:J 
I ; 
c:J 
~ 


c:J 
c:J 


1.40 (55) -1 I- 
Dimensions in mm (mil) 


Scale: H 
= 1 mm 


Similar land pad diagrams can be constructed for the 4O-lead and 56-lead TSOP packages. The 4O-lead land pad 
diagram can be constructed by adding four leads to both sides of the 32-lead land pad diagram, while maintaining 
the spacing between the lead footprints. The total footprint width becomes 9.8Omminstead of7.80mm used with the 
32-lead package. With the 56-lead package, 12 leads are added to both sides of the 32-lead land pad diagram, while 
maintaining the spacing between the lead footprints. The total footprint width becomes 13.8Omm instead of the 
7.8Omm used with the 32-lead package. 
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16.9 (665) 
'1 
t::J 
t::J 
t::J 
t::J 
t::J 
~-l~ 
t::J 
t::J 
t::Jt~ 
t::J 
t::J 
t::J 
t::J 
t::J 
t::J 
t::J 
t::J 


'" 
t::J 
t::J 
..... 


'" 
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Scale: H = 1 mm 
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Dimensions 
in mm (mils) 
297186-6 


Figure 2-2. Typical 
PSOP Land Pad Diagram 


3.0 
SOP Component 
Volume and Weight 


Package 
Max Height 
Max Volume 
Average 
Weight 


32-Lead 
TSOP 
1.20 mm 
194.2 mm3 
0.37 gms 


40-Lead 
TSOP 
1.20 mm 
247.2 mm3 
0.47gms 


56· Lead TSOP 
1.20 mm 
344.2 mm3 
0.65 gms 


44·Lead 
TSOP 
2.62mm 
1,225.7 mm3 
186 gms 


